RPC

[Gary Thorn [MVP-Windows Technologies/Xbox]]

>-----Original Message-----
>I am connecting into the internet through Earthlink via
>dial up and every time I am in it gives me this error
>message: Windows must now restart because the Remote
>Procedure Call (RPC) shut down unexpectadly. This only
>happens when I am on the internet, I tried to download
>netscape or a citrix client to make sure it wasn't and
>explorer problem but I can't stay in the internet log
>enough. Also, sometime it gives me a W32 error but not
>consistantly. Any body have any suggestions?
>.

This a virus called w32.Blaster.Worm

Patch from Microsoft:
http://tinyurl.com/h84v
More info from MS:
www.microsoft.com/security/incident/blast.asp

-------------------------------

From Symantec Security Response for the virus
w32.Blaster.Worm:
http://tinyurl.com/jozm

-------------------------------

From Kelly - MVP:
Close Windows Explorer, End Process in the Task Manager
for msblast.exe, run
the edit on line 257 then run the patch listed below it:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Windows XP Security Patch: Buffer Overrun In RPC Interface
Could Allow Code
Execution: http://tinyurl.com/ir5h

More information here:
www.kellys-korner-xp.com/xp_qr.htm#rpc

-------------------------------

Install a firewall (software like or hardware like router)
to help prevent future similar issues.


Hope this helps!

Gary Thorn
MVP-Windows Technologies/Xbox
Associate Expert


More about the Windows XP Expert Zone:
www.microsoft.com/windowsxp/expertzone

More about the MS MVP Program:
http://tinyurl.com/n08