Results 1 to 2 of 2
Thread: Remote Procedure Call (XP Pro)
2004-01-28, 23:22 #1
- Join Date
- Jun 2001
- New York, New York, Lebanon
- Thanked 1 Time in 1 Post
Remote Procedure Call (XP Pro)
<img src=/S/hello.gif border=0 alt=hello width=25 height=29> Loungers
OK here is the situation. My friend is getting this weird error that "Remote Procedure Call (RPC)", initiated by NT AuthoritySystem" error that will cause Windows XP Pro to shut down without any recourse to stop the shut down process.
According to This web site, this is an effect of the Lovesan or Blaster viri.
OK I scanned for viruses using Norton Antivirus with Def files as fresh as Jan. 26th 2004, and it did not detect anything.
The web site above has a Symantec utility to remove these nasty stuff, and I also downloaded stuff from the Symantec stuff, and did not detect anything.
I have patched up Windows, but I wonder what is the cause if the virus was not there? Its a fairly new clean install, I did a fresh clean install, that is FDisk, Partition, Format, install, back in Mid December 2003, and now we have this problem. Norton SystemWorks was installed right after Windows, and updated several times since installed.
So any ideas?
Wassim<img src=/S/compute.gif border=0 alt=compute width=40 height=20> in the <img src=/S/bagged.gif border=0 alt=bagged width=22 height=22>
2004-01-29, 01:33 #2
- Join Date
- Feb 2001
- Silicon Valley, USA
- Thanked 93 Times in 89 Posts
Re: Remote Procedure Call (XP Pro)
When a remote system sends a specially crafted attack packet to the RPC port, it causes that error. The system is not infected, but apparently it's running with the port open and the RPC flaw unpatched. Remediation is described in past posts; try searching back to last Fall for Blaster advice.