RPC

[phil]

Approxamately 5 minutes after I connect to the internet a
box appears on my screen with the following message; NT
authority system.Windows mustrestart because the remote
prcedure call (RPC) was terminated.

My computer then restarts after about a minute.This
happens everytime I am on line and is very frustrating.

Can anybody help,

Thanks,

Phil.

 

[Rick \Nutcase\ Rogers]

Hi Phil,

When the shutdown warning appears, click start/run and enter "shutdown -a"
to halt the process. It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Guest]

Also Install a good firewall! ZoneAlarm is a free one you
can install. Install a good anti-virus program making sure
you keep it's definitions up to date! The built in
firewall only monitors incoming traffic not outgoing (ie
spyware, trojans, etc.. you may have on your system).