RPC

From: Xin Li (alee_lx_at_yahoo.com)
Date: 08/20/03


Date: Tue, 19 Aug 2003 19:21:42 -0700


Looks like your computer is infected by the blaster
worm. Here are a few steps to fix it.

IMPORTANT
__________

Whenever your computer attempts to shutdown or reboot,
quickly:
Click the Start Button and then click RUN and type in
shutdown -a
and hit enter.
This should halt the rebooting problem temporarily.

You can also disconnect your computer from the internet
while you do the first step of turning on the Internet
Connection Firewall.

----------------------------------------------------

1)
Turn on the Internet Connection Firewall (Windows XP)

Generic Instructions for XP Users:
1. In Control Panel, double-click "Networking and
Internet Connections", and then click Network Connections.
2. Right-click the connection (your internet connection)
on which you would like to enable ICF, and then click
Properties.
3. On the Advanced tab, click the box to select the
option to "Protect my computer or network".
4. If you want to enable the use of some applications and
services through the firewall, you need to enable them by
clicking the Settings button, and then selecting the
programs, protocols, and services to be enabled for the
ICF configuration.

2)
Install the Patch from Microsoft for your Operating System
Windows XP (32-bit)
http://download.microsoft.com/download/9/8/b/98bcfad8-
afbc-458f-aaee-b7a52a983f01/WindowsXP-KB823980-x86-ENU.exe

3)
Run a removal Tool from an Anti-Virus Company to get the
Virus off your system
Network Associates
http://vil.nai.com/vil/stinger/

Trend Micro
http://housecall.trendmicro.com/

Symantec
http://securityresponse.symantec.com/avcenter/venc/data/w3
2.blaster.worm.removal.tool.html

Computer Associates
http://www3.ca.com/virusinfo/virus.aspx?ID=36265

Disclaimer:
This posting is provided "AS IS" with no warranties, and
confers no
rights.

>-----Original Message-----
>I GET A MESSAGE THAT SAYS WINDOWS IS SHUTTING DOWN
>REMOTE PROCEDURE CALL SERVICE TERMINATED UNEXPECTEDLEY.
> MY COMPUTER SHUTS DOWN.
> IT SAYS SENT BY NT AUTHORITY/ SYSTEM.
> I CAN NOT FIX IT.
> THANK YOU
> PAM RIVI
>.
>