RPC

[Chelle]

>-----Original Message-----
>Is it my imagination, or are we getting repeated Remote
>Procedure Call Service problems.Is this a Windows update
>bug or just a coincidence?.....any thoughts?
>.
>

I am still hoping for an answer on this myself. :(
Chelle

[Benny]

You need to read http://www.microsoft.com/security/security_bulletins/ms03-026.asp

An exploit for this vulnerability is already being used and is fairly
well publicized. The port scans and attacks have increased
dramatically in the alst few days (just look at the number of people
posting to newsgroups with this problem). Their are two versions of
the exploit I am aware of. One gives an attacker full control of your
machine, the other is a denial-of-service attack. Both disable the
RPC service when utilitized (thus the error messages you are seeing).
RPC (or is it DCOM?) uses ports 135, 139, and 445. All are crucial to
basic windows functionality so when it's suggested to "disable" those
ports, forget about it. A firewall is what you need. Or at least a
Cable/DSL router since it NAT's your ip address. That's what I use at
home, therefore making port 135 completely inaccessible from the
Internet. In the meantime, install the patch Microsoft recommends in
the bulletin above.

In case you can't access the bulletin, you can download the patch
directly at http://download.microsoft.com/download/9/8/b/98bcfad8-afbc-458f-aaee-b7a52a983f01/WindowsXP-KB823980-x86-ENU.exe

You should only install this patch on Windows XP machines. 2000 and
NT4 have different patches. Windows ME, Windows 95, and Windows 98
are not affected by this vulnerability (they have their own set of
issues... :).

Benny
http://www.lifeway.com



"Chelle" > wrote in message >...
> >-----Original Message-----
> >Is it my imagination, or are we getting repeated Remote
> >Procedure Call Service problems.Is this a Windows update
> >bug or just a coincidence?.....any thoughts?
> >.
> >
>
> I am still hoping for an answer on this myself. :(
> Chelle

[Bio]

Xref: kermit microsoft.public.windowsxp.perform_maintain:102254

http://microsoft.com/downloads/details.aspx?familyid=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en
IS THE LINK OF THE PATCH TO DOWNLOAD THAT WILL FIX THIS. IT'S A 1.2
MB PATCH SO MAY TAKE A FEW TIMES TO DOWNLOAD. EITHER SAVE TO DISK
FROM ANOTHER COMPUTER OR SAVE IT TO YOUR DESKTOP. YOU CAN ALSO OPEN
THE FILE AND IT WILL SELF-INSTALL (WHICH IS WHAT I DID AND IT WORKED)
BIO