XP shutdown after RPC failure

[Alan]

Hi hope you can help me when i try to download anything
from windows update or try to updat messenger i get an
automatic shutdown system message initiated by RPC and
the system shuts down Help please

 

[Ramesh [MS-MVP]]

Also,

Your system is infected by RPC (W32.Blaster) Worm. This is causing the
system to shutdown abnormally.

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.rem
oval.tool.html

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

MS-MVP Kelly Theriot's Repair Solution:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability:
http://www.sarc.com/avcenter/security/Content/8205.html

http://www.updatexp.com/msblast-exe.html

http://www.eeye.com/html/Research/Advisories/AL20030811.html

http://aumha.org/win5/a/blaster.htm

--
Regards,

Ramesh (MS-MVP)
(e-mail address removed)
http://www.mvps.org/sramesh2k

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

~ Please reply to newsgroup ~


Hi hope you can help me when i try to download anything
from windows update or try to updat messenger i get an
automatic shutdown system message initiated by RPC and
the system shuts down Help please

 

[leontas]

-----Original Message-----
Hi hope you can help me when i try to download anything
from windows update or try to updat messenger i get an
automatic shutdown system message initiated by RPC and
the system shuts down Help please
.
you have probably a virus, install the microsoft patch

from microsoft.com and update your antivirus

 

[Bruce Chambers]

Greetings --

If you've connected the PC to the Internet without having first
enabling a firewall, without having first installed an antivirus
application with current virus definition files, and/or before
installing the KB824146 Hotfix, you're very likely to have been
infected from any of the thousands of PCs on the Internet that are
constantly broadcasting the Blaster and/or Welchia worms. It only
takes a few seconds of exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH