Windows XP Problem RPC Fails

[Rakesh Shah]

I have faced one problem in windows XP

We have total more than 100 IBM pc ,which is under
warrenty.

Frequently following error occured.

"RPC fail System Going to down in one minute,Save your work
Message from System/Administrator"

We have install windows2003 server and client Windows Xp.

Let me know solution.

Regards,

Rakesh Shah
Service Manager
Tri-Continental (Africa) Limited.,
P O box 10450, UMA Showgrounds, Lugogo,
Kampala, Uganda
Tel:+256-41-220383/221315
Fax:+256-75-721315

 

[PA Bear]

1. Are all machines fully up-to-date at Windows Update?

2. Do all machines have a reliable and working anti-virus application
installed, with up-to-date definitions and configured to scan daily?

3. Firewalls?

All this and more at

Before You Connect a New Computer to the Internet
http://www.cert.org/tech_tips/before_you_plug_in.html
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

Are You Ready for WinXP SP2?
http://www.microsoft.com/athome/security/protect/default.aspx

WinXP SP2 Release Notes
http://support.microsoft.com/default.aspx?scid=kb;en-us;835935

AumHa Forums
http://forum.aumha.org

 

[D.Currie]

I have faced one problem in windows XP

We have total more than 100 IBM pc ,which is under
warrenty.

Frequently following error occured.

"RPC fail System Going to down in one minute,Save your work
Message from System/Administrator"

We have install windows2003 server and client Windows Xp.

Let me know solution.

Regards,

Rakesh Shah
Service Manager
Tri-Continental (Africa) Limited.,
P O box 10450, UMA Showgrounds, Lugogo,
Kampala, Uganda
Tel:+256-41-220383/221315
Fax:+256-75-721315

You have a virus.

 

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
enabled a firewall, without having first installed an antivirus
application with current virus definition files, and before installing
the KB828471 Hotfix, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

MS04-012 Cumulative Update for Microsoft RPC-DCOM
http://support.microsoft.com/default.aspx?scid=kb;en-us;828741

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Guest]

Balderdash "as fact". This is actually an issue!!!! I've had on SP2 install
on my home network. One installed nicely with multiple burbs, wheras on the
other two, I've been RPC'd to death with Windows Explorer drop and drag
functionality being gutted as well. I did not ghost the first loss on my DMV
box, but have been multi-re-SP2'ing with all mscongif services off etc on my
personal bastion. Even installed SP2 from the downloaded SP2 with no network
connection plugged in. Virus??? We don't got no stinkin DCOM virus(es). On
all the above machines I have always had all updates (DCOM included [proof
tested good in Gibbson Research's DCOMBobulator] for the last year), run
updated Norton in Auto-Protect, a complete Auto-Scan weekly, always run
Active Ports magnificent software, and always run ZoneAlarm Pro. In my last
battle restoring from a Ghost, I have rechecked and double checked with AVG
and McAfee Stinger. Virus?? Balderdish!!!! Issue??? 'Big Time', depending

 

[Malke]

Balderdash "as fact". This is actually an issue!!!! I've had on SP2
install
on my home network. One installed nicely with multiple burbs, wheras
on the other two, I've been RPC'd to death with Windows Explorer drop
and drag
functionality being gutted as well. I did not ghost the first loss on
my DMV box, but have been multi-re-SP2'ing with all mscongif services
off etc on my
personal bastion. Even installed SP2 from the downloaded SP2 with no
network
connection plugged in. Virus??? We don't got no stinkin DCOM
virus(es). On all the above machines I have always had all updates
(DCOM included [proof tested good in Gibbson Research's DCOMBobulator]
for the last year), run updated Norton in Auto-Protect, a complete
Auto-Scan weekly, always run
Active Ports magnificent software, and always run ZoneAlarm Pro. In
my last battle restoring from a Ghost, I have rechecked and double
checked with AVG
and McAfee Stinger. Virus?? Balderdish!!!! Issue??? 'Big Time',
depending on what one of a multitude of my programs may have wacked
the vaunted SP2 deep in the heart of registry land.

You know, I don't want to hurt your feelings, but this post makes no
sense. I understand that you are upset and that English is not your
first language. However, from the description you originally gave of
your problem, it would seem that you have either the MSBlaster or
Sasser worms, or one of the many Agobot variations. From what I can
glean from your post above - and it is admittedly rather difficult to
follow - I still think your network is not clean. I would suggest you
contact a local professional to come in and help you. That way, the
language barrier will not be an issue and someone on-site is going to
be able to do a far better diagnosis than people in a newsgroup who
cannot see your systems.

Malke