Re: Remote Call Procedure

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: wojo (kwoyach[SPAM)
Date: 04/01/04 

Date: Thu, 01 Apr 2004 04:23:54 GMT

"DeLisa Lopez" <anonymous@discussions.microsoft.com> wrote in message
news:13d6701c4179d$62e2c6b0$a601280a@phx.gbl...
> Other than a virus, what would cause an error message
> stating that NT Authority has caused Windows to be shut
> down due to an unexpected failure in the remote call
> service procedure. It only occurs when connected to the
> internet. Thank you in advance.

Never mind the "other than a virus"
It is a virus.
You have the Blaster worm.

1st to stop the RPC error so it doesn't interupt you while your making
repairs:
Start | Run | services.msc /s
Scroll down to "Remote Proceedure Call (RPC)" NOT (RPC) Locator
Right click and select properties
Under the "Recovery" Tab change all failures from "Restart the Computer" to
"Restart the Service"
This will keep the RPC from coming up.

Disable msblast.exe in task manager.
Ctrl+Alt+Del | Processes | Right click msblast.exe and click "End Process"

Download the Blaster Security Patch at:
http://www.microsoft.com/security/incident/blast.asp

Download AdAware & Spybot S & D:
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/

Disconnect from the internet

Run AdAware & Spybot
Run the Security Patch you downloaed earlier.

Make sure you have a firewall and AV software enabled and updated.
As long as you downloded and ran the patch above Blaster shouldn't come back
but there are plenty of others that can find your computer in minutes.

Change the RPC back to "Restart the Computer" the same as you did above.

Reconnect to the Internet and download the rest of the Microsoft Update
Security Patches. 

-- 
kwoyach[SPAM]@yahoo[SPAM].com
TO Email: Remove [SPAM]
If I can help you I will.
If you can help me thanks.
-- 
**Useful Links**
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp

Relevant Pages

  • Re: NT Authority / System Shutdown
    ... Scroll down to "Remote Proceedure Call (RPC)" NOT Locator ... Download AdAware & Spybot S & D: ... Run the Security Patch you downloaed earlier. ...
    (microsoft.public.windowsxp.basics)
  • Re: Do I have a virus?
    ... There is a virus in my computer. ... I cannot download anything concerning updates to Ad-Aware or Spybot. ... I cannot download anything at all from Microsoft.com like the Outlook ... updated immediately before and scan for viruses. ...
    (microsoft.public.security.virus)
  • Re: System Shutdown: NT AuthoritySystem
    ... Scroll down to "Remote Proceedure Call (RPC)" NOT Locator ... Download AdAware & Spybot S & D: ...
    (microsoft.public.windowsxp.general)
  • Re: virus i think
    ... Now consider malware - virus or spyware - neither which you need. ... They're all free - and most pretty small, so they download quickly enough. ... Install and run Spybot. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Wildsex
    ... > Here's one better than Spybot: ... > Spy Hunter from Enigma Software Group. ... > Download the trial version, it will scan and detect any ... >>downloading updated virus definitions to your current AV ...
    (microsoft.public.windowsxp.general)