PDA

View Full Version : RPC error


Dave
December 5th 03, 12:10 PM
When we are online for a few minutes, we get a error
shutdown message that says RPC service terminated
unexpectedly. What do we do to solve the error?

John E. Carty
December 5th 03, 12:10 PM
http://support.microsoft.com/?kbid=823980



http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html



"Dave" > wrote in message
...
> When we are online for a few minutes, we get a error
> shutdown message that says RPC service terminated
> unexpectedly. What do we do to solve the error?

Michael Solomon \(MS-MVP Windows Shell/User\)
December 5th 03, 12:10 PM
There's a new major worm hitting the Internet currently. You can get more
info about the worm here:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.htm
l

The following "fix" procedure is courtesy of Ron Martell, MVP

'This is caused by a new and rapidly spreading virus.

To clear up the "NT Authority\System" and RPC call errors:

1. Go to http://support.microsoft.com/?kbid=823980 and download the security
patch. If at all possible do this on a clean machine and copy the patch to a
3.5 inch diskette.

2. Boot the infected machine into Safe Mode (use the F8 key multiple times
before and during the boot menu). Insert the 3.5 inch diskette with the
patch on it and run it. Do not reboot yet.

3. Use Start - Run - MSCONFIG and go to the Startup tab. Locate the entry
for MSBLAST.EXE and clear the checkbox for it.

4. Use Start - Search and check all your hard drives for the file
MSBLAST.EXE and delete all copies of it.

5. Shut down and restart the computer normally.

6. Immediately do an update of your antivirus software and when the updates
are installed do a complete virus scan of your hard drive. So far
Symantec/Norton, Trend Micro (PC-Cillin) and Sophos seems to be the only
major companies with an update for this specific virus (4:30 p.m. PDT 11 Aug
2003) but the others will undoubtedly follow within 24 hours.
--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/


"Dave" > wrote in message
...
> When we are online for a few minutes, we get a error
> shutdown message that says RPC service terminated
> unexpectedly. What do we do to solve the error?

Jonathan Maltz [MS-MVP]
December 5th 03, 12:10 PM
Install:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
As soon as you can!

Also enable Windows XP's built in firewall:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;283673

Then go to WindowsUpdate to pick up the latest updates:
http://windowsupdate.microsoft.com

More info about the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

--
--Jonathan Maltz [Microsoft MVP - Windows Server]
http://www.imbored.biz - A Windows Server 2003 visual, step-by-step
tutorial site :-)
Only reply by newsgroup. If I see an email I didn't ask for, it will be
deleted without reading.


"Dave" > wrote in message
...
> When we are online for a few minutes, we get a error
> shutdown message that says RPC service terminated
> unexpectedly. What do we do to solve the error?

Google