RPC Termination Problem Not Like The Rest

[Chris P.]

Ok I am fixing a computer for a family member and I am in college for
Computer Science so I know a good deal about computers. However, I am
stumped with this issue. The problem is when i she connects to MSN internet
through Dial-up it then gives the 60sec system shutdown mesage from the RPC
terminating unsuspectedly.
I am getting the same problem everyone else is in the other post here, but
the patch i tried to put in gave me an error "couldn't determine
authenticity (or something like that) because crytop--- service is not
started" I looked and it is started and I even tried restarting it and then
retrying the patch, but still no luck. She has never updated WinXP since she
got the computer 2 years ago. I downloaded the tools from symantec and
mcafee to detect and remove the worm as well as other recent virus treats,
but they detected nothing.

I eliminated the dial-up and connect it to my network at my house, which has
cable internet, and it works fine with no RPC system shutdown problems. It
seems to only happen when using the dial-up through MSN. I also tried
Updating the WinXP from the cable internet and the samthing.

Now I tried to use windows update but it gave me a "ADMINISTRATOR ONLY"
message which I know how to resolve and it didn't work. I can't update this
machine, patch it with the MS026 patch and I am stumped . I really
appreciate your help and thanks ahead of time.

 

[Doug Knox MS-MVP]

www.kellys-korner-xp.com/xp_qr.htm#rpc

Follow the link for the patch and download it directly.

 

[PA Bear]

"setup could not verify the integrity of the file Update.inf. Make sure the
Cryptographic service is running on this computer"

<paste>
This is a trust error. We need to make sure we have disabled all Antivirus
and web enhancement/accelerator programs. Also please verify the following:

Next navigate to Trusted Sites. Internet Explorer > Tools > Internet Options

Security

Select "Trusted Sites" Select "Sites" Uncheck the "Require Server
Verification" option Add the following:

http://windowsupdate.microsoft.com

http://v4.windowsupdate.microsoft.com

http://download.windowsupdate.com

Click Apply, then Ok. Exit Internet Explorer

Verify the following folder is not Read only and has Full Control permission
for Everyone:

C:\program files\windwosupdate\v4\temp

Perform a Selective Startup: Start > Run Type "msconfig" (without quotes)

On the Startup Tab, De-Select all items - disable all. Click Apply, then
OK. Reboot, and try Windows Update again.

If error persists, please post the Windows Update.log file [to
news://msnews.microsoft.com/microsoft.public.windowsupdate].
--
Thanks,
Lucy [MS]
Windows Update
</paste>

Study hard, Chris! <G>
--
HTH...Please post back to this thread

~Robear Dyer (aka PA Bear)
MS MVP-Windows (IE/OE)
http://mvp.support.microsoft.com

 

[Chris P.]

Thanks for the help, but I ran tools to detect it and I searched the
registry keys for the stuff that needs to be deleted and there wasn't
anything in there at all. Nothing that was listed in the articles to remove
from the keys. I am clueless because i know she is having the exact same
problem everyone else is having and never had it before yesterday. Let me
know if you can help me further.

Thanks,
Chris

 

[Doug Knox MS-MVP]

It was designed specifically for the original, since it uses known file
name, registry entries and etc. There are other worms that use a similar
exploit, but the file names are different and random, and the same goes for
the Registry entries.