Link to home
Start Free TrialLog in
Avatar of university1
university1

asked on

RPC error shutdown

Please help me :-

This is the second time now - I get a Sytsem shutdown error box with a big red cross.

It says - This system is shuttig down. Pls save all work in progress and logg off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM.

Time left for shutdown 0:33 Sec

Message: Windows now must restart becasue the Remote Procedure Call(RPC) service terminatelted unexpectedly.
----------------------------------

I would appreacite your input. Must admit - I have restored my system to last weeks date - to see if this helps.

Thanks
U
Avatar of jvuz
jvuz
Flag of Belgium image

Your pc has probably been affected by the MSBlast worm.

Look here:

http://forums.afterdawn.com/thread_view.cfm/45541
Avatar of pjknibbs
pjknibbs

Yep, sounds like Blaster to me too. Since you're running WinXP, you should enable the built-in firewall for your Internet connection before plugging it in for the first time--this prevents Blaster infection nicely.
ASKER CERTIFIED SOLUTION
Avatar of Pete Long
Pete Long
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of university1

ASKER

Thanks for everyones help.

Just been in your website PeterLong - looking forward for its completion.

Thanks

University1
Question regarding this error.

I have a formatted HDD with a fresh copy of XP Pro. Im getting these exact errors. I have removed all partitions from the drive and started from scratch only to get the same results. I install XP - Connect my Adsl for regustration. And Boom the machine hits the RPC error.

Any Advise
paulsmith@telus.net
Hi paulsmith

I basically downloaded a patch from Microsft website for the wormblaster and it sorted itself out.
Hope this helps
U
To Stop it try do this:

StartMenu >> Run
and then type this:
Shutdown -a
then Hit [ENTER]

it will appears at later time but you can prevent it

Install Symantec Personal Firewall 2003 and it will not appear any more...
Hi there,

if the above methods didn´t solve your problem your computer could be infected with the W32.Welchia.B.Worm, wich causes the exact same effects on the RPC service as the blaster worm.

The following symantec page describes the worm and provides a tool to remove it:
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.b.worm.html

Welchia removal tool:
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

Hope it helps.
A friend of mine had blaster, installed the patch and virus checking software now says his computer is clean. Now his dial-up connection doesn't work. We've both had a look at it  can't figure out what's wrong. I am not sure its a virus leftover, but it looks like it.

I checked all the DFU and network settings and everything looks fine. Dial-ups with different telephone numbers all produce the same result. The connection is established, down at the bottom right, you get the little graphic and the comment that a connection is established at 49200bps or somesuch. However no network application receives data. I tried ping with an IP address and this also failed, so it is not just a DNS problem.

I'd appreciate all tips,
thanks
brad
I have the same problem as....         hbkgenx    

"Question regarding this error.

I have a formatted HDD with a fresh copy of XP Pro. Im getting these exact errors. I have removed all partitions from the drive and started from scratch only to get the same results. I install XP - Connect my Adsl for regustration. And Boom the machine hits the RPC error."

I reformatted my Hard Drive did a fresh install same error and I don't see any worms running in Task Manager. It sounds like the virus but I don't see any evidence of it.

Any information would help, thanks.

disproportionate1@yahoo.com
Sorry, this question is already ansewered and closed. You need to ask a new question in order to receive help.

Also, it's against the rules of EE to place your email-address in a question, it's allowed  to place it in your profile, but not in a question.

Jvuz
Windows > Run >  and type : Shutdown -a
it will stop it for a while.