Results 1 to 10 of 10
  1. #1
    New Lounger
    Join Date
    May 2003
    Location
    Sacramento, California, USA
    Posts
    11
    Thanks
    0
    Thanked 0 Times in 0 Posts

    RPC Terminating (Win XP Pro)

    Hi All,
    When on the internet a message box opens up and informs us that the computer is shutting down in one minute. It says the shutdown was initiated by the by the NT Authority/System and that the Remote Procedure Call (RPC) Service terminated unexpectedly. The computer only allows us to be on the internet a few minutes before this happens and it does this on both of our profiles.
    Does anyone have any suggestions? Thank you,
    Rick

  2. #2
    Plutonium Lounger
    Join Date
    Mar 2002
    Posts
    84,353
    Thanks
    0
    Thanked 29 Times in 29 Posts

    Re: RPC Terminating (Win XP Pro)

    See the thread <post#=283593>post 283593</post#> immediately below yours in this forum. You've caught the newest worm. You need a patch from Microsoft <!mskb=823980>Microsoft Knowledge Base Article 823980<!/mskb> and the latest virus definitions for the AntiVirus software you use.

  3. #3
    Platinum Lounger
    Join Date
    Jan 2001
    Location
    Quedgeley, Gloucester, England
    Posts
    5,333
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: RPC Terminating (Win XP Pro)

    Just to reiterate what Hans says, it is the W32/Blaster-A or LoveSAN, or MSBlaster worm.

    See (for example) what F-Secure has to say, or Sophos or Symantec .....
    <font face="Script MT Bold"><font color=blue><big><big>John</big></big></font color=blue></font face=script>

    Ita, esto, quidcumque...

  4. #4
    Silver Lounger
    Join Date
    Jun 2001
    Location
    Niagara Falls, New York, USA
    Posts
    1,878
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: RPC Terminating (Win XP Pro)

    Hi Hans

    Do I understand the following should be run on all XP computers:

    1. Blaster Worm Critical Security Patch for Winsdows XP
    2. Symantec W32.Blaster.Worm Fix Tool 1.0.0

    Thanks, John

  5. #5
    Plutonium Lounger
    Join Date
    Nov 2001
    Posts
    10,550
    Thanks
    0
    Thanked 7 Times in 7 Posts

    Re: RPC Terminating (Win XP Pro)

    I think it is important to install the Microsoft security fix even if you have a firewall and the right version of a virus scanner.

    I spent a few hours working with my brother trying to understand what was happening on his computer which appeared to be infected except that it had none of the files described on the virus vendors web sites. He had the latest Symantec virus signatures and an Outpost firewall that kept reporting attempts to use tftp. Eventually he installed the security fix and the symptoms went away.

    I have now heard from a colleague at work who had very similar behaviour at a couple of his customers' sites.

    StuartR

  6. #6
    Plutonium Lounger
    Join Date
    Mar 2002
    Posts
    84,353
    Thanks
    0
    Thanked 29 Times in 29 Posts

    Re: RPC Terminating (Win XP Pro)

    OK, good point.

    I will edit my post (without making your remarks incomprehensible)

  7. #7
    Plutonium Lounger
    Join Date
    Mar 2002
    Posts
    84,353
    Thanks
    0
    Thanked 29 Times in 29 Posts

    Re: RPC Terminating (Win XP Pro)

    No, it depends on your situation.

    - The Blaster worm makes use of a few ports; if you have a firewall, all these ports are blocked.
    - The latest virus definitions from all major anti virus software makers detect this worm.

    It is probably a good idea to install the Windows security patch # 823980, described in Microsoft Security Bulletin MS03-026, but again, if you have a firewall, you're probably already immune. Added: see StuartR's recommendation below to install this patch, so go ahead and do this in any case.

    The Fix Tool from Symantec (other AV software makers probably have comparable tools) is only necessary if you have ready been infected. You'll find out sson enough if you've been infected <img src=/S/evilgrin.gif border=0 alt=evilgrin width=15 height=15>.

  8. #8
    Silver Lounger
    Join Date
    Jun 2001
    Location
    Niagara Falls, New York, USA
    Posts
    1,878
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: RPC Terminating (Win XP Pro)

    Hi Hans

    For your information and to others, I ran Symantec W32.Blaster.Worm Fix Tool 1.0.0, if found no virus on my XP computer and asked if I wanted to run Blaster Worm Critical Security Patch for Winsdows XP

    I'm using Windows XP Professional, Version 2002, Service Pack 1 according to System Properties.

    Where do I go on my system to see what patches have been applied?

    Where do I go on the Internet to see what patches are available for XP Professional?

    Thanks, John

  9. #9
    3 Star Lounger
    Join Date
    Jan 2001
    Location
    Seattle, Washington
    Posts
    320
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: RPC Terminating (Win XP Pro)

    To see what updates or patches are installed on your computer, go to Control Panel>Add/Remove Programs and the patches will be listed. To update, go to www.windowsupdate.com, or Start>Programs>Windows Update. However, this MSBlast worm is written to attack this web site, and as well there's some scrambling around the world to get some last minute virus protection, so Windows Update is dang slow right now.

    kip

  10. #10
    Silver Lounger Bruce K's Avatar
    Join Date
    Apr 2002
    Location
    Phoenix, Arizona, USA
    Posts
    1,876
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: RPC Terminating (Win XP Pro)

    Hi, John ~

    Make sure you install the 823980 patch first, reboot, disable System Restore, then run the Blaster removal tool. Symantec's tool is the smallest and fastest.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •