PDA

View Full Version : RPC error message


allan Corby
December 5th 03, 12:09 PM
RPC error message keeps shutting my computer down.
had techie over to look at it. at the same time he had
2 calls from 2 other xphome users with EXACT same problem
occurring at same time and day. after 2PM 8/2/11/03.

What is going on?

Nicholas
December 5th 03, 12:09 PM
Read and follow the instructions in this article:

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=3D823980

**** You need to make sure you have a FIREWALL enabled ****

Open XP's "Help and Support" and type: FIREWALL , and hit enter.
Click on the topic titled "Enable or Disable Internet Connection =
Firewall".

Additional information from Symantec:

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability
http://securityresponse.symantec.com/avcenter/security/Content/8205.html


--=20
Nicholas

-------------------------------------------------------------------------=
--

"allan Corby" > wrote in message:
...

| RPC error message keeps shutting my computer down.
| had techie over to look at it. at the same time he had
| 2 calls from 2 other xphome users with EXACT same problem
| occurring at same time and day. after 2PM 8/2/11/03.
|=20
| What is going on?

Chris Lanier
December 5th 03, 12:09 PM
MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

"allan Corby" > wrote in message
...
> RPC error message keeps shutting my computer down.
> had techie over to look at it. at the same time he had
> 2 calls from 2 other xphome users with EXACT same problem
> occurring at same time and day. after 2PM 8/2/11/03.
>
> What is going on?

Mark Salloway
December 5th 03, 12:09 PM
Hi Allan
Have you installed the security update for the RPC Buffer Overrun flaw?
http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

You may also need to activate a firewall, such as the one included with
Windows XP in the interim to block the exploit on ports 135, 139, or 445.

http://microsoft.com/windowsxp/pro/using/howto/networking/icf.asp
Workarounds: Right click the My Computer Icon/Properties/Remote. Uncheck
both boxes.
Go to Start/Run and type in: services.msc. Scroll down to Remote Procedure
Call (RPC)/Logon/First Failure/Restart the Service.

Worm.Win32.Autorooter
http://www.avp.ch/avpve/worms/win32/autorooter.stm

--
Mark Salloway MS-MVP (XP)
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone


"allan Corby" > wrote in message
...
> RPC error message keeps shutting my computer down.
> had techie over to look at it. at the same time he had
> 2 calls from 2 other xphome users with EXACT same problem
> occurring at same time and day. after 2PM 8/2/11/03.
>
> What is going on?

D.Currie
December 5th 03, 12:09 PM
"allan Corby" > wrote in message
...
> RPC error message keeps shutting my computer down.
> had techie over to look at it. at the same time he had
> 2 calls from 2 other xphome users with EXACT same problem
> occurring at same time and day. after 2PM 8/2/11/03.
>
> What is going on?

1) get a new techie

2) This is probably related to the security patch that MS put out in
mid-July to address this particular security hole. In a nutshell, you've
been hacked.

There's plenty of information at Microsoft's web site, and there have been
articles in the newspaper, on TV, and on the radio....

I can see how the average home user might have ignored these, but someone
who professes to be in the computer business should have at least heard
about it.

yuiol23
December 5th 03, 12:09 PM
I started getting this problem and I noticed something that started running
on my computer "msblast" dose this have anything to do with this?
"D.Currie" > wrote in message
...
>
> "allan Corby" > wrote in message
> ...
> > RPC error message keeps shutting my computer down.
> > had techie over to look at it. at the same time he had
> > 2 calls from 2 other xphome users with EXACT same problem
> > occurring at same time and day. after 2PM 8/2/11/03.
> >
> > What is going on?
>
> 1) get a new techie
>
> 2) This is probably related to the security patch that MS put out in
> mid-July to address this particular security hole. In a nutshell, you've
> been hacked.
>
> There's plenty of information at Microsoft's web site, and there have been
> articles in the newspaper, on TV, and on the radio....
>
> I can see how the average home user might have ignored these, but someone
> who professes to be in the computer business should have at least heard
> about it.
>
>

D.Currie
December 5th 03, 12:09 PM
Yes, that's part of it.

"yuiol23" > wrote in message
...
> I started getting this problem and I noticed something that started
running
> on my computer "msblast" dose this have anything to do with this?
> "D.Currie" > wrote in message
> ...
> >
> > "allan Corby" > wrote in message
> > ...
> > > RPC error message keeps shutting my computer down.
> > > had techie over to look at it. at the same time he had
> > > 2 calls from 2 other xphome users with EXACT same problem
> > > occurring at same time and day. after 2PM 8/2/11/03.
> > >
> > > What is going on?
> >
> > 1) get a new techie
> >
> > 2) This is probably related to the security patch that MS put out in
> > mid-July to address this particular security hole. In a nutshell, you've
> > been hacked.
> >
> > There's plenty of information at Microsoft's web site, and there have
been
> > articles in the newspaper, on TV, and on the radio....
> >
> > I can see how the average home user might have ignored these, but
someone
> > who professes to be in the computer business should have at least heard
> > about it.
> >
> >
>
>

Google