Virus! Changed harddrives same problem..

[MightyPOOsticK]

Quick story....I ran a virus....ugh...

Ok I bought a new harddrive today and decided to install xp on it fresh...so i formatted installed and I STILL have the same problem....heres a ss of it...

sigh...comp is rebooting

edit: sorry I couldn't even finish message cause comp was rebooting...

Ok next time I get the error I'll upload it....

[MightyPOOsticK]

Message =

"Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly."

And it gives me a minute to close and save everything...

Please help..

[MightyPOOsticK]

K I have a feeling its somewhere to do with booting because I run the scan at housecall.antivirus.com and it finds it and "cleans" it but I still have the same worm when I reboot....

edit: something named msblast.exe keeps wanting to startup...i took it out of msconfig but it still puts itself in there...

[burningrave101]

It has nothing to do with your hard drive. Read this:

http://securityresponse.symantec.com/avcenter/security/Content/8205.html

[LawyerRon]

Sounds like you need a firewall. You're probably getting hacked through open ports. Get yourself a good router as it will act as a hardware firewall.

[doctorgonzo]

The problem is in Windows, so simply installing it again will not solve the problem. This is the RPC exploit that is spreading rapidly everywhere.

For more information on what to do, go here: http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

[yellohut]

windows also released a patch for it, in case anyone wants to prevent this worm..
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

[CarlS]

You may also go to Computer Associates, http://www3.ca.com/virusinfo/virus.aspx?ID=36265 They have a cleaning tool for download.

[PCTH123]

Originally posted by MightyPOOsticK
Message =

"Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly."

And it gives me a minute to close and save everything...

Please help..

I had the same message, This is what I did.
Click Start, Go to Control Panel, Click Administrative Tools, Click Services. Under Services Find Remote Procedure Call. There will be two of them, one says locator. Double Click on it, then click on the Recovery TAB. Under 1st failure 2nd failure and Sub failures choose Restart the Service, set time and days to 0 (zero). Click Apply and OK. Do the same for the other RPC.
Now when you go online you will see that message. I don't know if that is a virus. When you go to the administrative tools and click event viewer you will see that rpc had caused an error but had been restarted. At least for now your PC won't shut down all of a sudden. GOOOD LUCK!!!

[PCTH123]

Originally posted by MightyPOOsticK
K I have a feeling its somewhere to do with booting because I run the scan at housecall.antivirus.com and it finds it and "cleans" it but I still have the same worm when I reboot....

edit: something named msblast.exe keeps wanting to startup...i took it out of msconfig but it still puts itself in there...
I've heard it's a virus called "MSBLAST". If you press ctrl,alt, delete. click task manager, click processes and you will see it. There is a security update in the Microsoft website www.microsoft.com for that problem.

[dtex]

If you want to see how active this worm is, check out the # of alerts on your firewall. I've had 67 in the last hour. Usually only get one or 2 per day. Last night, I had over 200 in a 3 hour session. For the 1st time in years, I'm glad I'm still using W-95.:D