Re: Remote Procedure Call (RPC) shuts down computer

From: Big Mac (no-email-in-usenet_at_zzz.org)
Date: 02/18/04


Date: Wed, 18 Feb 2004 19:50:57 GMT

And you know - the really frustrating thing about the situation is
that Windows XP Home version does not install the firewall engaged.
This is a very bad overlook by Microsoft, in my opinion.

I too had the call and shutdowns on the Internet after re-installing
Windows XP. I didn't turn on the firewall again after the re-install.
(No service packs in the re-install version I had.) 2 seconds on the
Internet, and you've got the blaster worm, I understand. But I
thought this guy said he had the service packs already, which I
thought meant that even without the firewall he should have been
protected.

Anyway, I didn't have to go to my command line and type in anything.
All I did was turn on the XP firewall. No more system shutdowns.

But oddly, I went to the Symantec website and got their free blaster
removal program. I ran it, twice. It said nothing detected.
Someone mentioned somewhere that I could have had an "attempt" without
catching it.

What should be happening, but isn't:
Microsoft - please automatically turn on the XP firewall as default
when Windows is installling.
To all Firewall makers - when installing your firewall program, have
your software check to see if the XP firewall is turned on, and if
there would be a conflict, turn it off.

------- original thread:
On Wed, 18 Feb 2004 04:24:03 -0800,
<anonymous@discussions.microsoft.com> wrote:
>Your computer is now infected with the W32.Blaster.Worm or
>one of its variants. This happened because you have not
>been using an internet connection firewall and have
>apparently neglected to install the critical updates
>available at the Windows Update website.
>-----------------------------------------------------------
>If your computer is constantly attempting to shutdown
>or reboot, quickly go to:
>Start > Run and type: CMD , and hit enter.
>This opens the Command Prompt window.
>Then type: shutdown -a , and hit enter.
>This should halt the rebooting problem.
>-----------------------------------------------------------
>Then immediately turn-on Windows XP's built-in Firewall:
>http://www.microsoft.com/security/protect/
>(To enable the built-in firewall, go to:
>Control Panel, double-click Networking and Internet
>Connections, then click Network Connections. Right-click
>your connection, then
>Click Properties, and on the Advanced tab, click the option
>"Protect my computer and network..." Note: the built in
>firewall only monitors incoming traffic not outgoing (ie
>spyware, trojans, etc.. you may have on your system).)
>
>What You Should Know About the Blaster Worm and Its
>Variants
>http://www.microsoft.com/security/incident/blast.asp
>
>A tool is available to remove Blaster worm and Nachi worm
>infections from computers
>that are running Windows 2000 or Windows XP
>http://support.microsoft.com/?kbid=833330
>
>A security issue has been identified that could allow an
>attacker to
>remotely compromise a computer running Microsoft Windows
>and
>gain complete control over it. You can help protect your
>computer
>by installing this update from Microsoft.
>http://www.microsoft.com/downloads/details.aspx?
>FamilyId=2354406C-C5B6-44AC-9532-
>3DE40F69C074&displaylang=en
>
>Above courtesy of MVP Carey
>- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>
>***Install a good firewall. ZoneAlarm is a free one you
>can install.
>Install a good anti-virus program making sure you keep
>it's definitions up to date! ***
>- - - - - - - - - - - - -
>Microsoft Security Bulletin MS03-39
>http://support.microsoft.com/?kbid=824146
>
>What You Should Know About the Blaster Worm
>http://www.microsoft.com/security/incident/blast.asp
>
>Protect Your PC
>http://www.microsoft.com/security/protect/default.asp
>
>W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
>http://www.symantec.com/avcenter/venc/data/w32.blaster.worm
>.html
>
>W32.Blaster.Worm Removal Tool
>http://www.symantec.com/avcenter/venc/data/w32.blaster.worm
>.removal.tool.html
>
>W32.Welchia.Worm a.k.a. W32/Nachi.Worm
>http://securityresponse.symantec.com/avcenter/venc/data/w32
>.welchia.worm.html
>
>W32.Welchia.Worm Removal Tool
>http://www.symantec.com/avcenter/venc/data/w32.welchia.worm
>.removal.tool.html
>
>>-----Original Message-----
>>Remote Procedure Call (RPC) shuts down computer when I
>connect to the internet.
>>This has only started following installation of a new
>primary hard drive and a brand new copy of XP home which
>includes the service pack.
>>There is no other software installed yet apart from my
>internet connections. This happened within a few minutes
>of connecting to windows update.
>>
>>
>>.
>>



Relevant Pages

  • Re: Startup programs
    ... > If you don't wish to follow all of the advice immediately, ... I will assume a "Windows" operating system is what ... If there was more than one, install ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Latest Update Wreaked Havok - Cannot Restore
    ... track of what you install in order to be able to uninstall it. ... been diligent with your critical updates, ... Windows Update ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: partitioned hardrive and installing XP Pro
    ... the clean install method is the best by far... ... of contacting the Internet UNTIL you have activated the Windows XP ... download/instyall all critical updates. ... FIREWALL ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Service Pack 1 & 2
    ... but enable to install because of service pack 2. ... >> I recently reinstalled Windows XP home on a new hard disk because the ... >> I tried to install service pack 1 but was rejected from doing so. ... > Why you should use a computer firewall.. ...
    (microsoft.public.windowsupdate)
  • Re: How do I get the Windows Update icon to stop notifying me of SP2?
    ... If you don't wish to follow all of the advice immediately, ... using Windows XP "prettifications". ... If there was more than one, install them back ... You should at least turn on the built in firewall. ...
    (microsoft.public.windowsupdate)

Loading