RPC termination problem

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Skippy (anonymous_at_discussions.microsoft.com)
Date: 03/02/04


Date: Tue, 2 Mar 2004 12:22:31 -0800

It sounds like someone is exploiting the DCOM bug. Just
because a virus didn't get found doesn't mean the bug
hasn't been exploited. First of all is this server
patched? Does this only happen when you put this on the
internet? Try turing on the internet firewall on the
connection that is on the internet. If it doesn't happen,
there is a good chance that you have bene "rooted" so to
speak.

>-----Original Message-----
>An error message appears each time the Win Server 2003 is
>connected to the internet for a while:
>
>"This system is shutting down. Please save all work in
>progress and log off. Any unsaved changes will be lost.
>This shutdown was initiated by NT Authority\system.
>
>Windows must now restart because Remote Procedure Call
>(RPC) Service terminated unexpectedly."
>
>Note that the old Win2000 Server OS on my computer, CPU
P4
>2.8GHz, Intel motherboard 845, did not have this problem
>before, and the above error msg is happening only after
my
>system was upgraded to the new Windows Server 2003. I
sent
>the error reports to at least five times after restarting
>the system, but I received no answer or any helpful
>information from MS.
>
>I am using MSN service for the internet. No virus was
>found after scanned by Norton Antivirus with virus
>definition file dated March 1, 2004. Maybe this error msg
>was caused by compatibilty, but how to check and verify
>components or configuration compatibility again after
>installed ????
>
>Your answers will be appriciated. Thanks.
>
>.
>



Relevant Pages

  • Re: Default User folder temp IE files
    ... this weekend when server quiet. ... Only user with write perm on that folder structure is ... Forced a full virus scan for all workstations from AVG ... Files in the temp internet files inside it do not ...
    (microsoft.public.windows.server.sbs)
  • Re: Virus Problems......
    ... I'd probably start by disabling your Internet connection to prevent any more ... your Exchange AV scanner to get rid of this if it's showing up on the M ... Since I doubt you're opening e-mail attachments on the server, ... Run at least one virus scan on all of them. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Default User folder temp IE files
    ... Post back if you figure it out because I haven't heard of any recent virus ... Files in the temp internet files inside it do not sound good, ... What purpose does that Default User folder serve? ... someone had used the server to browse the web - nothing ...
    (microsoft.public.windows.server.sbs)
  • Re: Internet Explorer in Windows 2k3
    ... Do a full virus scan on your server. ... My server is used ONLY for hosting a webpage and ftp. ... to it through my router for Remote Desktop Sharing also. ... I am connected to the internet. ...
    (microsoft.public.windows.server.general)
  • Re: Server Running EXTREMELY Slow
    ... unfirewalled, direct Internet connections. ... > It is wrong, IMO, to assume that if you do not have Internet access, then ... > you are free from virus attacks. ... > infect your server. ...
    (microsoft.public.windows.server.sbs)