Re: Remote Procedure Call (RPC) Service
From: David (anonymous_at_discussions.microsoft.com)
Date: 07/16/04
- Next message: Hilary Karp: "Re: Avoiding Need to Click On User Name on Welcome Screen"
- Previous message: kooee: "Re: XP restarts after login"
- In reply to: Bruce Chambers: "Re: Remote Procedure Call (RPC) Service"
- Next in thread: Bruce Chambers: "Re: Remote Procedure Call (RPC) Service"
- Reply: Bruce Chambers: "Re: Remote Procedure Call (RPC) Service"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 15 Jul 2004 19:48:57 -0700
Bruce,
Thanks for your help, I was browsing and getting shut
down all over the place, I didn't know what was
happening, then I saw this question & reply, you saved me
loads of time and headaches and much hair pulling, which
XP has given me since this occurred, I'd buy you a drink
if I could Bruce, Thanks, it's good to see someone post
on here that's serious and helpful.
Thanks again!!!
>-----Original Message-----
>Greetings --
>
> If you connected the PC to the Internet without
having first
>enabled a firewall, without having first installed an
antivirus
>application with current virus definition files, and
before installing
>the KB828471 Hotfix, you're very likely to get infected
from any of
>the thousands of PCs on the Internet that are constantly
broadcasting
>the Blaster and/or Welchia worms. It only takes a few
seconds of
>exposure.
>
> To stay on-line long enough to get the necessary
updates, patches,
>and removal tools, click Start > Run, and
enter "shutdown -a" when the
>next RPC countdown begins. This will abort the shut
down. Also, make
>sure you've enabled a firewall before starting, to
preclude any more
>intrusions while getting the updates/patches/tools.
>
>MS04-012 Cumulative Update for Microsoft RPC-DCOM
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;828741
>
>What You Should Know About the Blaster Worm
>http://www.microsoft.com/security/incident/blast.asp
>
>W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
>http://www.symantec.com/avcenter/venc/data/w32.blaster.wo
rm.html
>
>W32.Blaster.Worm Removal Tool
>http://www.symantec.com/avcenter/venc/data/w32.blaster.wo
rm.removal.tool.html
>
>W32.Welchia.Worm a.k.a. W32/Nachi.Worm
>http://securityresponse.symantec.com/avcenter/venc/data/w
32.welchia.worm.html
>
>W32.Welchia.Worm Removal Tool
>http://www.symantec.com/avcenter/venc/data/w32.welchia.wo
rm.removal.tool.html
>
>McAfee AVERT Stinger
>http://us.mcafee.com/virusInfo/default.asp?id=stinger
>
>
>Bruce Chambers
>--
>Help us help you:
>http://dts-l.org/goodpost.htm
>http://www.catb.org/~esr/faqs/smart-questions.html
>
>You can have peace. Or you can have freedom. Don't ever
count on
>having both at once. - RAH
>
>
>"Simon Brettell" <simon.brettell@anuenterprise.com.au>
wrote in
>message news:eRN6F$haEHA.1248@TK2MSFTNGP11.phx.gbl...
>> Some machines operating Windows XP Pro are being
forced to shut down
>because
>> of following error message:
>>
>> " System is shutting down - shutdown was initiated by
NT
>AUTHORITY/SYSTEM.
>> Windows must now restart because the Remote Procedure
Call (RPC)
>service
>> terminated unexpectedly. "
>>
>> I am concerned that this error has arisen because of a
virus
>infection.
>> Alternatively, I thought it would be appropriate to
complete an
>update of
>> Windows XP Pro. Any advice on this error message or
correcting the
>problem
>> would be appreciated.
>>
>>
>
>
>.
>
- Next message: Hilary Karp: "Re: Avoiding Need to Click On User Name on Welcome Screen"
- Previous message: kooee: "Re: XP restarts after login"
- In reply to: Bruce Chambers: "Re: Remote Procedure Call (RPC) Service"
- Next in thread: Bruce Chambers: "Re: Remote Procedure Call (RPC) Service"
- Reply: Bruce Chambers: "Re: Remote Procedure Call (RPC) Service"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|