PDA

View Full Version : Auto Shutdown - Error in Remote Control Protocol


Annabella
December 5th 03, 11:17 PM
I've just upgraded from Win 98 to Win XP and whenever I
turn on the computer soon or later an error message would
pop up saying computer has to shut down because there's an
error in Remote Control Protocol. What's wrong, and how to
rectify?

Rick \Nutcase\ Rogers
December 5th 03, 11:17 PM
Um, more likely it is with the RPC or Remote Procedure Call.

It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
http://mvp.support.microsoft.com/
Associate Expert - WinXP - Expert Zone
www.microsoft.com/windowsxp/expertzone
Win98 Help - www.rickrogers.org

"Annabella" > wrote in message
...
> I've just upgraded from Win 98 to Win XP and whenever I
> turn on the computer soon or later an error message would
> pop up saying computer has to shut down because there's an
> error in Remote Control Protocol. What's wrong, and how to
> rectify?

Annabella
December 5th 03, 11:17 PM
Thanks very much! Before I was using Win 98 so I didn't
pay much attention to Lovesan... So I guess I need to
download the patch. reinstall Win XP and run the patch? or
do i need to format HDD first to wipe the slate clean?
>-----Original Message-----
>Um, more likely it is with the RPC or Remote Procedure
Call.
>
>It's a virus called blaster or lovesan. Information:
>
>http://www.kellys-korner-xp.com/xp_qr.htm#rpc
>http://vil.nai.com/vil/content/v_100499.htm
>http://www.symantec.com/avcenter/venc/data/w32.blaster.wor
m.html
>http://www.bigblackglasses.com/Article.aspx?Article=342
>
>You need the patch described here to protect against it:
>
>MS03-026: Buffer Overrun in RPC Interface May Allow Code
Execution
>http://support.microsoft.com/?kbid=823980
>
>Problem is, you needed to install the patch BEFORE you
got infected to avoid
>it.
>
>--
>Best of Luck,
>
>Rick Rogers aka "Nutcase" MS-MVP - Win9x
>http://mvp.support.microsoft.com/
>Associate Expert - WinXP - Expert Zone
>www.microsoft.com/windowsxp/expertzone
>Win98 Help - www.rickrogers.org
>
>"Annabella" > wrote in message
...
>> I've just upgraded from Win 98 to Win XP and whenever I
>> turn on the computer soon or later an error message
would
>> pop up saying computer has to shut down because there's
an
>> error in Remote Control Protocol. What's wrong, and how
to
>> rectify?
>
>
>.
>

Annabella
December 5th 03, 11:17 PM
or would doing a virus scan help now.
>-----Original Message-----
>Um, more likely it is with the RPC or Remote Procedure
Call.
>
>It's a virus called blaster or lovesan. Information:
>
>http://www.kellys-korner-xp.com/xp_qr.htm#rpc
>http://vil.nai.com/vil/content/v_100499.htm
>http://www.symantec.com/avcenter/venc/data/w32.blaster.wor
m.html
>http://www.bigblackglasses.com/Article.aspx?Article=342
>
>You need the patch described here to protect against it:
>
>MS03-026: Buffer Overrun in RPC Interface May Allow Code
Execution
>http://support.microsoft.com/?kbid=823980
>
>Problem is, you needed to install the patch BEFORE you
got infected to avoid
>it.
>
>--
>Best of Luck,
>
>Rick Rogers aka "Nutcase" MS-MVP - Win9x
>http://mvp.support.microsoft.com/
>Associate Expert - WinXP - Expert Zone
>www.microsoft.com/windowsxp/expertzone
>Win98 Help - www.rickrogers.org
>
>"Annabella" > wrote in message
...
>> I've just upgraded from Win 98 to Win XP and whenever I
>> turn on the computer soon or later an error message
would
>> pop up saying computer has to shut down because there's
an
>> error in Remote Control Protocol. What's wrong, and how
to
>> rectify?
>
>
>.
>

Ramesh
December 5th 03, 11:18 PM
No need to reformat the system. Run the Fixblast.exe tool from Symantec. +
update the virus definititions (for the AV software you have) and run a full
system scan.

Install the path MS03-026 & MS03-039 as well. Importantly, enable Internet
Connection Firewall to prevent the problem occurring again.

Follow the advice given by Rick.

--
Regards,
Ramesh
AOL: SRamesh2k

«·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
«.............. Ramesh ...............»
«·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»

~ Please reply to newsgroup ~


"Annabella" > wrote in message
...
Thanks very much! Before I was using Win 98 so I didn't
pay much attention to Lovesan... So I guess I need to
download the patch. reinstall Win XP and run the patch? or
do i need to format HDD first to wipe the slate clean?
>-----Original Message-----
>Um, more likely it is with the RPC or Remote Procedure
Call.
>
>It's a virus called blaster or lovesan. Information:
>
>http://www.kellys-korner-xp.com/xp_qr.htm#rpc
>http://vil.nai.com/vil/content/v_100499.htm
>http://www.symantec.com/avcenter/venc/data/w32.blaster.wor
m.html
>http://www.bigblackglasses.com/Article.aspx?Article=342
>
>You need the patch described here to protect against it:
>
>MS03-026: Buffer Overrun in RPC Interface May Allow Code
Execution
>http://support.microsoft.com/?kbid=823980
>
>Problem is, you needed to install the patch BEFORE you
got infected to avoid
>it.
>
>--
>Best of Luck,
>
>Rick Rogers aka "Nutcase" MS-MVP - Win9x
>http://mvp.support.microsoft.com/
>Associate Expert - WinXP - Expert Zone
>www.microsoft.com/windowsxp/expertzone
>Win98 Help - www.rickrogers.org
>
>"Annabella" > wrote in message
...
>> I've just upgraded from Win 98 to Win XP and whenever I
>> turn on the computer soon or later an error message
would
>> pop up saying computer has to shut down because there's
an
>> error in Remote Control Protocol. What's wrong, and how
to
>> rectify?
>
>
>.
>

Annabella
December 5th 03, 11:18 PM
Thanks very much both Rick and Ramesh!
>-----Original Message-----
>No need to reformat the system. Run the Fixblast.exe tool=20
from Symantec. +
>update the virus definititions (for the AV software you=20
have) and run a full
>system scan.
>
>Install the path MS03-026 & MS03-039 as well.=20
Importantly, enable Internet
>Connection Firewall to prevent the problem occurring=20
again.
>
>Follow the advice given by Rick.
>
>--=20
>Regards,
>Ramesh
>AOL: SRamesh2k
>
> =AB=B7=B4`=B7.(*=B7.=B8(`=B7.=B8 =B8.=B7=B4)=B8.=B7*).=B7=B4`=B7=BB
> =AB.............. Ramesh ...............=BB
> =AB=B7=B4`=B7.(=B8.=B7=B4(=B8.=B7* *=B7.=B8)`=B7.=B8).=B7=B4`=B7=BB
>
>~ Please reply to newsgroup ~
>
>
>"Annabella" > wrote in message
...
>Thanks very much! Before I was using Win 98 so I didn't
>pay much attention to Lovesan... So I guess I need to
>download the patch. reinstall Win XP and run the patch? or
>do i need to format HDD first to wipe the slate clean?
>>-----Original Message-----
>>Um, more likely it is with the RPC or Remote Procedure
>Call.
>>
>>It's a virus called blaster or lovesan. Information:
>>
>>http://www.kellys-korner-xp.com/xp_qr.htm#rpc
>>http://vil.nai.com/vil/content/v_100499.htm
>>http://www.symantec.com/avcenter/venc/data/w32.blaster.wo
r
>m.html
>>http://www.bigblackglasses.com/Article.aspx?Article=3D342
>>
>>You need the patch described here to protect against it:
>>
>>MS03-026: Buffer Overrun in RPC Interface May Allow Code
>Execution
>>http://support.microsoft.com/?kbid=3D823980
>>
>>Problem is, you needed to install the patch BEFORE you
>got infected to avoid
>>it.
>>
>>--=20
>>Best of Luck,
>>
>>Rick Rogers aka "Nutcase" MS-MVP - Win9x
>>http://mvp.support.microsoft.com/
>>Associate Expert - WinXP - Expert Zone
>>www.microsoft.com/windowsxp/expertzone
>>Win98 Help - www.rickrogers.org
>>
>>"Annabella" > wrote in message
...
>>> I've just upgraded from Win 98 to Win XP and whenever I
>>> turn on the computer soon or later an error message
>would
>>> pop up saying computer has to shut down because there's
>an
>>> error in Remote Control Protocol. What's wrong, and how
>to
>>> rectify?
>>
>>
>>.
>>
>
>
>.
>

Ramesh
December 5th 03, 11:21 PM
You're Welcome :)

--
Regards,
Ramesh
AOL: SRamesh2k

«·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
«.............. Ramesh ...............»
«·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»

~ Please reply to newsgroup ~


"Annabella" > wrote in message
...
Thanks very much both Rick and Ramesh!
>-----Original Message-----
>No need to reformat the system. Run the Fixblast.exe tool
from Symantec. +
>update the virus definititions (for the AV software you
have) and run a full
>system scan.
>
>Install the path MS03-026 & MS03-039 as well.
Importantly, enable Internet
>Connection Firewall to prevent the problem occurring
again.
>
>Follow the advice given by Rick.
>
>--
>Regards,
>Ramesh
>AOL: SRamesh2k
>
> «·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
> «.............. Ramesh ...............»
> «·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»
>
>~ Please reply to newsgroup ~
>
>
>"Annabella" > wrote in message
...
>Thanks very much! Before I was using Win 98 so I didn't
>pay much attention to Lovesan... So I guess I need to
>download the patch. reinstall Win XP and run the patch? or
>do i need to format HDD first to wipe the slate clean?
>>-----Original Message-----
>>Um, more likely it is with the RPC or Remote Procedure
>Call.
>>
>>It's a virus called blaster or lovesan. Information:
>>
>>http://www.kellys-korner-xp.com/xp_qr.htm#rpc
>>http://vil.nai.com/vil/content/v_100499.htm
>>http://www.symantec.com/avcenter/venc/data/w32.blaster.wo
r
>m.html
>>http://www.bigblackglasses.com/Article.aspx?Article=342
>>
>>You need the patch described here to protect against it:
>>
>>MS03-026: Buffer Overrun in RPC Interface May Allow Code
>Execution
>>http://support.microsoft.com/?kbid=823980
>>
>>Problem is, you needed to install the patch BEFORE you
>got infected to avoid
>>it.
>>
>>--
>>Best of Luck,
>>
>>Rick Rogers aka "Nutcase" MS-MVP - Win9x
>>http://mvp.support.microsoft.com/
>>Associate Expert - WinXP - Expert Zone
>>www.microsoft.com/windowsxp/expertzone
>>Win98 Help - www.rickrogers.org
>>
>>"Annabella" > wrote in message
...
>>> I've just upgraded from Win 98 to Win XP and whenever I
>>> turn on the computer soon or later an error message
>would
>>> pop up saying computer has to shut down because there's
>an
>>> error in Remote Control Protocol. What's wrong, and how
>to
>>> rectify?
>>
>>
>>.
>>
>
>
>.
>

Google