System shutdown message (rpc)

[Stephanie]

I get a system shutdown message that says remote procedure
call service ternimated unexpectedly. After 45 seconds it
restarts the computer. It seems to do it at random
sometimes when i'm not even the computer, sometimes it
happens after ten minutes sometimes it runs for hours.
Any ideas what can cause this???

 

[Chris Lanier]

You have got a virus, removal info at...
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

More info about the worm:
http://www.microsoft.com/security/incident/blast.asp

More info about the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

 

[Nick Le Lievre]

I get a system shutdown message that says remote procedure
call service ternimated unexpectedly. After 45 seconds it
restarts the computer. It seems to do it at random
sometimes when i'm not even the computer, sometimes it
happens after ten minutes sometimes it runs for hours.
Any ideas what can cause this???

You`ve got the blaster.worm virus there is quite a lot of work involved to
make sure you don`t get it some up to date anti-virus and a firewall
blocking key ports before the PC ever gets onto the Internet is one option
search google for that - however if you have a computer that is already
protected download the MS KB824126 to disc and install it on all XP
systems - the latest version of the patch 824146 is available to download
here
http://www.microsoft.com/downloads/search.aspx?displaylang=en&categoryid=7
so you don`t have to use Windows Update during which an unpatched open
system can get it.

 

[Bruce Chambers]

Greetings --

If you've connected the PC to the Internet without having first
enabling a firewall, without having first installed an antivirus
application with current virus definition files, and/or before
installing the KB824146 Hotfix, you're very likely to have been
infected from any of the thousands of PCs on the Internet that are
constantly broadcasting the Blaster and/or Welchia worms. It only
takes a few seconds of exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Guest]

-----Original Message-----
I get a system shutdown message that says remote procedure
call service ternimated unexpectedly. After 45 seconds it
restarts the computer. It seems to do it at random
sometimes when i'm not even the computer, sometimes it
happens after ten minutes sometimes it runs for hours.
Any ideas what can cause this???
.
Hi Stephanie,

I´m getting the same shudown message as you do. But I
don`t have any answers to this problem, hope to get some
help as well, sorry.

 

[Nick Le Lievre]

-----Original Message-----
I get a system shutdown message that says remote procedure
call service ternimated unexpectedly. After 45 seconds it
restarts the computer. It seems to do it at random
sometimes when i'm not even the computer, sometimes it
happens after ten minutes sometimes it runs for hours.
Any ideas what can cause this???
.
Hi Stephanie,

I´m getting the same shudown message as you do. But I
don`t have any answers to this problem, hope to get some
help as well, sorry.

Same answers apply;

In my post it may sound as though I`m saying that you can get the blaster
virus by going to the Windows update site with an unpatched machine - what I
actually mean`t is at anytime you can get the virus whilst your PC is
connected to the internet becuase they`re are machines out there scanning IP
address ranges looking for PCs to infect - therefore the longer you spend
online with an unpatched machine the more chance you have of being found and
it being installed it doesn`t matter what your doing with the PC at the
time.

It only takes a few seconds to deliver the packet so you could
theorectically be on the Internet for precisely 10seconds and get it.