Re: RPC Shutdown

From: Frank Saunders, MS-MVP (franksaunders_at_mvps.org)
Date: 01/24/05 

Date: Mon, 24 Jan 2005 15:12:27 -0600

"Adam Raff" <adam@nospam.postalias> wrote in message
news:uoCgg5jAFHA.2112@TK2MSFTNGP09.phx.gbl...
> Good Day,
>
> Something just happened, and it seems to be very hard to fix. We have a
> Windows XP system running SP1. All the files have been updated so it has
> the latest Critical updates.
>
> After tuning off a service for AOL (port magic) I started receiving the
> following error
>
> Windows must now restart because the Remote Procedure Call (RPC) service
> terminated unexpectedly.
>
> This happens every time I start up the system, even if I don't log in to
> the
> system. If I login via Safe Mode the system seems a little bit more
> stable.
> I have ran a virus scan and it came up clean since this is a typical
> symptom
> of the blaster virus.
>
> Any ideas would be a help. Please note that this system did not come with
> a
> Windows XP CD but did come with a restore CD. I do have access to a
> Windows
> XP CD with SP1 if I need it. I would rather not use the restore CD since
> it
> may force me to reformat the drive.
>
> Thanks
> Adam Raff
>
>

Or the Sasser worm
What You Should Know About the Sasser Worm and Its Variants
http://www.microsoft.com/security/incident/sasser.asp
Microsoft has updated the cleanup tool for W32.Sasser.worm to remove the C
and D variants of the Sasser worm. The Sasser removal tool now removes
Sasser A, B, C and D. The updated removal tool is located at
http://www.microsoft.com/downloads/details.aspx?FamilyId=76C6DE7E-1B6B-4FC3-90D4-9FA42D14CC17&amp;displaylang=en
and is documented in Knowledge Base article KB841720
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720 

-- 
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only.  Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx

Relevant Pages

  • Re: lsass.exe error
    ... > Windows XP on his system, ... What You should Know about the Sasser Worm and its Variants ... A tool is available to remove the Sasser worm variants ... McAfee AVert Stinger Virus Removal Tool ...
    (microsoft.public.windowsxp.hardware)
  • Re: WHAT TO DO NOW THAT I HAVE SASSER VIRUS ?
    ... The latest Windows XP Critical Updates have apparently not been installed...... ... Follow these directions to remove The Sasser Worm from your computer: ... PSS Security Response Team Alert - Sasser Worm and Variants ... the ones that come with Windows XP. ...
    (microsoft.public.windowsupdate)
  • RE: System Shutdown Message
    ... Windows 2000 Users: What to Do If Your Computer Has Been Infected by Sasser ... What You Should Know About the Sasser Worm and Its Variants ... To avoid further problems, disconnect from the Internet: ... manufacture stand-alone software firewalls. ...
    (microsoft.public.win2000.applications)
  • Re: Lsass.exe worm
    ... The latest Windows XP Critical Updates have apparently not been installed...... ... Follow these directions to remove The Sasser Worm from your computer: ... PSS Security Response Team Alert - Sasser Worm and Variants ... the ones that come with Windows XP. ...
    (microsoft.public.windowsupdate)
  • Re: My Dell Computer shuts down itself with the message below.
    ... The latest Windows XP Critical Updates have apparently not been installed...... ... Follow these directions to remove The Sasser Worm from your computer: ... PSS Security Response Team Alert - Sasser Worm and Variants ... the ones that come with Windows XP. ...
    (microsoft.public.windowsxp.security_admin)