Re: rpc shutdowns

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Carey Frisch [MVP] (mrxp2004_at_nospamyahoo.com)
Date: 03/17/04 

Date: Wed, 17 Mar 2004 10:21:57 -0600

There are thousands of nasty computer viruses/worms looking for unprotected
computers. Your computer can be infected within a few milliseconds the moment
an internet connection is established if your computer is not properly secured.

Apparently, your computer is now infected with the W32.Blaster.Worm or one of its variants.
This happened because you have not been using an internet connection firewall and have
apparently neglected to install the critical updates available at the Windows Update website.

------------------------------------------------------------------

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

------------------------------------------------------------------

Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

Special note if you use AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm infections from computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious Programs
http://support.microsoft.com/?kbid=824146 

-- 
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Be Smart!  Protect your PC!
http://www.microsoft.com/security/protect/
---------------------------------------------------------------------------------------
"William" <anonymous@discussions.microsoft.com> wrote in message:
 news:E56130B7-9BAF-46A1-BF74-50FB04987DDE@microsoft.com...
|I am experiencing frequent (every 10 minutes) shutdowns due to RPC interruption and something from NT 
authority\system.  This is very disruptive.  Any solution for this other than disabling the internet 
connection??

Relevant Pages

  • Re: Low-bandwith ADSL, or something? (mostly off-topic)
    ... because most spyware and virus infections are ... intervention, just a Windows box. ... Internet Explorer and Outlook Express. ... without having to resort to that 'internet connection ...
    (uk.comp.os.linux)
  • RE: Shut down http://www.microsoft.com/security/incident/sasser_printxp.asp
    ... If you are using Microsoft® Windows® XP or Windows XP Service Pack 1 and your computer has been infected by the Sasser worm, you can take these steps to update your software, remove the worm, and help protect against future infections. ... If your computer is acting sluggish or if the Internet connection is slow, the worm may be flooding your local network connection. ... Right-click the Dial-up, LAN, or High-Speed Internet connection that you use to connect to the Internet, and then click Properties from the shortcut menu. ...
    (microsoft.public.windowsupdate)
  • Re: Comp. kicks me off online
    ... This happened because you have not been using an internet connection firewall and have ... Then immediately turn-on Windows XP's built-in Firewall: ... A tool is available to remove Blaster worm and Nachi worm infections from computers ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Frustrated Please Help system shutdown
    ... >an internet connection is established if your computer ... available at the Windows Update website. ... >A tool is available to remove Blaster worm and Nachi ... worm infections from computers ...
    (microsoft.public.windowsxp.general)
  • Re: AUTO RESTART B/C OF RPC?????HELLLLLP
    ... This happened because you have not been using an internet connection firewall and have ... Then immediately turn-on Windows XP's built-in Firewall: ... A tool is available to remove Blaster worm and Nachi worm infections from computers ...
    (microsoft.public.windowsxp.perform_maintain)