The Remote Procedure Call (RPC) service terminated unexpectedly.

[Kaustubh]

I am getting this msg repeatedly while getting connected
to the net. I have WIN XP HOME OS.

Msg reads:
"The Remote Procedure Call (RPC) service terminated
unexpectedly. It has done this 1 time(s). The following
corrective action will be taken in 60000 milliseconds:
Reboot the machine.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp."

I am at my wit's end. Every time I connect & try to open
a new IE window this msg pops up & i have to shut down.
Please HELP me.

 

[Nicholas]

Kaustubh --

Apparently, your computer has an unwelcome visitor known as the WM32 Blaster/Lovsan worm.
It entered your computer through your internet connection because the "firewall"
was not properly enabled and essential critical updates were not installed from
the Windows Update website. For instructions on fixing the problem, visit:

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Remove W32.MSBlast.Worm
http://www.dougknox.com/xp/scripts_desc/xp_msblast.htm

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: shutdown -a , and hit enter.

This should halt the rebooting problem.

Then immediately turn-on Windows XP's built-in Firewall:

How do I turn on the Firewall?
http://www.andyrathbone.com/tips/firewall.html


--
Nicholas

------------------------------------------------------------------------


| I am getting this msg repeatedly while getting connected
| to the net. I have WIN XP HOME OS.
|
| Msg reads:
| "The Remote Procedure Call (RPC) service terminated
| unexpectedly. It has done this 1 time(s). The following
| corrective action will be taken in 60000 milliseconds:
| Reboot the machine.
|
| For more information, see Help and Support Center at
| http://go.microsoft.com/fwlink/events.asp."
|
| I am at my wit's end. Every time I connect & try to open
| a new IE window this msg pops up & i have to shut down.
| Please HELP me.
|

 

[Gary Thorn [MVP-Windows Technologies/Xbox]]

-----Original Message-----
I am getting this msg repeatedly while getting connected
to the net. I have WIN XP HOME OS.

Msg reads:
"The Remote Procedure Call (RPC) service terminated
unexpectedly. It has done this 1 time(s). The following
corrective action will be taken in 60000 milliseconds:
Reboot the machine.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp."

I am at my wit's end. Every time I connect & try to open
a new IE window this msg pops up & i have to shut down.
Please HELP me.

This a virus called w32.Blaster.Worm

Patch from Microsoft:
http://tinyurl.com/h84v
More info from MS:
www.microsoft.com/security/incident/blast.asp

-------------------------------

From Symantec Security Response for the virus
w32.Blaster.Worm:
http://tinyurl.com/jozm

-------------------------------

From Kelly - MVP:
Close Windows Explorer, End Process in the Task Manager
for msblast.exe, run
the edit on line 257 then run the patch listed below it:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Windows XP Security Patch: Buffer Overrun In RPC Interface
Could Allow Code
Execution: http://tinyurl.com/ir5h

More information here:
www.kellys-korner-xp.com/xp_qr.htm#rpc

-------------------------------

Install a firewall (software like or hardware like router)
to help prevent future similar issues.

Most users will be using the 32 bit edition of WinXP Home
and Pro.


Hope this helps!

Gary Thorn
MVP-Windows Technologies/Xbox
Associate Expert

This posting is provided "AS IS" with no warranties, and
confers no rights

More about the Windows XP Expert Zone:


More about the MS MVP Program:
http://tinyurl.com/n08

 

[steve]

probably already know this but you have been nabbed by the
msblaster virus, you need to download the latest patch
from microsoft and all your problems will go.