Re: RPC

From: Bruce Chambers (bchambers_at_nospamcableone.net)
Date: 11/09/03 

Date: Sun, 9 Nov 2003 13:06:28 -0700

Greetings --

   If you've connected the PC to the Internet without having first
enabling a firewall, without having first installed an antivirus
application with current virus definition files, and/or before
installing the KB824146 Hotfix, you're very likely to have been
infected from any of the thousands of PCs on the Internet that are
constantly broadcasting the Blaster and/or Welchia worms. It only
takes a few seconds of exposure.

    To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger

Bruce Chambers 

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace.  Or you can have freedom.  Don't ever count on
having both at once. -- RAH
"carly" <anonymous@discussions.microsoft.com> wrote in message
news:022101c3a6f7$7f43d270$a101280a@phx.gbl...
> Hi im having problems with my computer, if I connect to
> the internet it starts to shutdown after about 5 mins,
> saying there is a failure with the RPC system.  has
> anyone got any idea what I can do to prevent it happening?
>

Relevant Pages

  • Re: RPC termination
    ... the thousands of PCs on the Internet that are constantly broadcasting ... next RPC countdown begins. ... sure you've enabled a firewall before starting, ... W32.Blaster.Worm Removal Tool ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Rpc System Shut Down Msg
    ... If you've connected the PC to the Internet without having first ... next RPC countdown begins. ... sure you've enabled a firewall before starting, ... W32.Blaster.Worm Removal Tool ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Remote Procedure Call (RPC)
    ... next RPC countdown begins. ... sure you've enabled a firewall before starting, ... W32.Blaster.Worm Removal Tool ... > and Internet Explorer. ...
    (microsoft.public.windowsxp.newusers)
  • Re: RPC System Shutdown
    ... sure you've enabled a firewall before starting, ... W32.Blaster.Worm Removal Tool ... > internet using dial-up networking. ...
    (microsoft.public.windowsxp.general)
  • Re: Remote Procedure Call termination
    ... If you've connected the PC to the Internet without having first ... sure you've enabled a firewall before starting, ... W32.Blaster.Worm Removal Tool ... > termination error that shuts down and restarts my ...
    (microsoft.public.windowsxp.security_admin)