Re: need help, remote procedure call service is terminated unexpectedly

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Bruce Chambers (bchambers_at_nospamcableone.net)
Date: 02/24/04 

Date: Mon, 23 Feb 2004 19:28:08 -0700

Greetings --

       If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

    To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger

Bruce Chambers 

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace.  Or you can have freedom.  Don't ever count on 
having both at once. -- RAH
"steve" <sjo22@aol.com> wrote in message 
news:14d8a01c3fa1d$8f2ccf60$a001280a@phx.gbl...
> Hi,
>   I just installed windows xp on my laptop and i
> continually get a message saying that windows will
> restart, and then a countdown from 1 minute, after which
> time windows shuts down and restarts.  The problem
> happens at least once every hour, often even quicker.
> The message say the problem was caused by NT
> AUTHORITY\SYSTEM and that the Remote Procedure Call (RPC)
> service terminated unexpectedly. If anyone knows how I
> can fix this or who to get in touch with please let me
> know.
>    Thank you

Relevant Pages

  • Re: WXP SP2 Firewall not started
    ... and then restart each time to see if the additional entry ... if the issue only occurs on the OEM Windows XP installation ... >laptop restarted the network connection is lost and the firewall will not ... >repair but then it suddenly lost the network connection again. ...
    (microsoft.public.windowsxp.general)
  • Re: Remote procedure call problem
    ... sure you've enabled a firewall before starting, ... W32.Blaster.Worm Removal Tool ... > Then the windows count down 30 sec then restart. ...
    (microsoft.public.windowsxp.general)
  • Re: RPC Terminates and computer restarts
    ... sure you've enabled a firewall before starting, ... W32.Blaster.Worm Removal Tool ... Windows will now restart" ...
    (microsoft.public.windowsxp.general)
  • Re: Windows XP and RPC
    ... sure you've enabled a firewall before starting, ... W32.Blaster.Worm Removal Tool ... > "windows must now restart because the remote procedure ... > windows then restarts. ...
    (microsoft.public.windowsxp.basics)
  • System shuts down while online
    ... been using an internet connection firewall and have ... Then immediately turn-on Windows XP's built-in Firewall: ... W32.Blaster.Worm Removal Tool ...
    (microsoft.public.windowsxp.security_admin)