System's continously crashing

[Zimmer]

My computer keeps shuting down saying that the Remote
Procedure call service is terminating what do I do?

 

[Jonathan Maltz [MS-MVP]]

Install:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
As soon as you can!

Also enable Windows XP's built in firewall:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;283673

Then go to WindowsUpdate to pick up the latest updates:
http://windowsupdate.microsoft.com

More info about the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

--
--Jonathan Maltz [Microsoft MVP - Windows Server]
http://www.imbored.biz - A Windows Server 2003 visual, step-by-step
tutorial site
Only reply by newsgroup. If I see an email I didn't ask for, it will be
deleted without reading.

 

[Ronnie Vernon MVP]

My computer keeps shuting down saying that the Remote
Procedure call service is terminating what do I do?

There's a new major worm currently hitting the Internet. You can get more
info about the worm here:

*Warning*
If your system has been infected by this new worm, applying the security
patch will not remove or disable the worm. This only protects your system
from from any new infection.

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

The following fix procedure is courtesy of Ron Martell, MVP

This is caused by a new and rapidly spreading worm.

To clear up the "NT Authority\System" and RPC call errors:

1. Go to http://support.microsoft.com/?kbid=823980 and download the
security patch. If at all possible do this on a clean machine and copy the
patch to a 3.5 inch diskette.

2. Boot the infected machine into Safe Mode (tapping the F8 key multiple
times
before and during the boot menu). Insert the 3.5 inch diskette with the
patch on it and run it. Do not reboot yet.

3. Use Start - Run - MSCONFIG and go to the Startup tab. Locate the entry
for MSBLAST.EXE and clear the checkbox for it.

4. Use Start - Search and check all your hard drives for the file
MSBLAST.EXE and delete all copies of it.

5. Shut down and restart the computer normally.

6. Immediately do an update of your antivirus software and when the updates
are installed do a complete virus scan of your hard drive.
--
Ronnie Vernon
Microsoft MVP
Windows Shell/User

Please reply to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

 

[Mike Kolitz]

Please read the instructions here:
http://www.bigblackglasses.com/Article.aspx?Article=342
or
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

--
Mike Kolitz MCSE 2000
MS-MVP - Windows Setup and Deployment

PATCH YOUR WINDOWS NT/2000/XP/2003 COMPUTERS!
http://www.microsoft.com/technet/security/bulletin/MS03-026.asp

How to disinfect and infected computer:
http://www.bigblackglasses.com/Article.aspx?Article=342

 

[Jonathan Maltz [MS-MVP]]

Install:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
As soon as you can!

Also enable Windows XP's built in firewall:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;283673

Then go to WindowsUpdate to pick up the latest updates:
http://windowsupdate.microsoft.com

More info about the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

--
--Jonathan Maltz [Microsoft MVP - Windows Server]
http://www.imbored.biz - A Windows Server 2003 visual, step-by-step
tutorial site
Only reply by newsgroup. If I see an email I didn't ask for, it will be
deleted without reading.

 

[ratdaddy000]

-----Original Message-----
My computer keeps shuting down saying that the Remote
Procedure call service is terminating what do I do?
.
Well I have been fighting this all day.Finally got msblast

folder removed and new firewall up,but guess what? IT is
still shutting down! System32 shows no msblast folder
now,under processes there is no msblast,what is going on
here??????Has it infected another part of my computer?HELP!!!

 

[ron jones]

-----Original Message-----
My computer keeps shuting down saying that the Remote
Procedure call service is terminating what do I do?
.

 

[Kelly]

To stop the reboots: Go to Start/Run and type in: services.msc. Scroll down
to Remote Procedure Call (RPC)/Logon/First Failure/Restart the Service.

Then close Windows Explorer, End Process in the Task Manager for
msblast.exe, run the edit on line 257 then run the patch listed below it:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Windows XP Security Patch: Buffer Overrun In RPC Interface Could Allow Code
Execution: http://tinyurl.com/ir5h

More information here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc


/xp_tweaks.htm

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm