View Full Version : Re: RPC Error Shutdown
Steve C. Ray
February 27th 04, 04:41 PM
You have the blaster worm. Look here:
Blaster worm
Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146
What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp
W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
--
Steve C. Ray
"Disturbed in Dublin" > wrote in message
...
> Newly installed XP Pro and Office 2000 Outlook, working fine for the first
few minutes after making a connection to the ISP. Then suddenly a big oul'
red "X" warning screen letting me know it's about to shut down the system
because of an "unexpected termination" something to do with the RPC (remote
procedure call). Then, after a very polite 60 second warning, wham.
>
> Can't seem to find anything in the Help & Support yoke that even
contemplates this.
>
> Any thoughts? I'm assuming the settings are wrong somewhere...
>
>
Gordon
February 27th 04, 04:41 PM
"Disturbed in Dublin" > wrote in message
...
> Newly installed XP Pro and Office 2000 Outlook, working fine for the first
few minutes after making a connection to the ISP. Then suddenly a big oul'
red "X" warning screen letting me know it's about to shut down the system
because of an "unexpected termination" something to do with the RPC (remote
procedure call). Then, after a very polite 60 second warning, wham.
>
> Can't seem to find anything in the Help & Support yoke that even
contemplates this.
>
> Any thoughts? I'm assuming the settings are wrong somewhere...
>
>
You have the blaster worm. Unfortunately I haven't got the remedy with me -
do a Google search, you'll find LOADS of stuff.
Bruce Chambers
February 28th 04, 06:01 AM
Greetings --
If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.
To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.
Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146
What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp
W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html
W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html
McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger
Bruce Chambers
--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
"Disturbed in Dublin" > wrote in message
...
> Newly installed XP Pro and Office 2000 Outlook, working fine for the
> first few minutes after making a connection to the ISP. Then
> suddenly a big oul' red "X" warning screen letting me know it's
> about to shut down the system because of an "unexpected termination"
> something to do with the RPC (remote procedure call). Then, after a
> very polite 60 second warning, wham.
>
> Can't seem to find anything in the Help & Support yoke that even
> contemplates this.
>
> Any thoughts? I'm assuming the settings are wrong somewhere...
>
>
vBulletin® v3.6.4, Copyright ©2000-2012, Jelsoft Enterprises Ltd.