Strange XP Professional problem

[whr2206]

I'm using Windows XP Professional... i was just minding my own business when i got this prompt..

Something about the system is shutting down...
NT/AUTHORITY/SYSTEM
because RPC was terminated unnexpectedly... and windows will now restart.. and it gives me like 60 seconds to save what i was in and what not... but this has happened to me like 5 or 6 times now. I have NO IDEA whats causing this... any ideas at all? thanks a lot

[RenegadeKing]

You are getting hacked. It just happened to me all morning. You have to go download the windows critical updates right now. May take a few tries if u get hit in the middle of downloading. Blocking port 135 with a firewall should work too i think.

[doctorgonzo]

Scan for trojans using a program like The Cleaner from Moosoft. The RPC vulnerability is used by many trojans, and this is probably what is causing the problem. Especially if you use some P2P program.

Also, make sure that you have downloaded the security patch from M$. It's a good idea to run Windows Update regularly if you don't have it set to download updates automatically.

[lancefiles]

Originally posted by RenegadeKing You are getting hacked. It just happened to me all morning. You have to go download the windows critical updates right now. May take a few tries if u get hit in the middle of downloading. Blocking port 135 with a firewall should work too i think.

And how do you block Port 135 with a firewall?

[whr2206]

ok thanks.. I'll download the updates asap. But nowI have another problem! Like... as soon as I log into windows I get it now.. like literally I have no time to get anything donwloaded or done before i get hat message.... what should I do aout that?

[RenegadeKing]

Same was happening here. Sometimes when it happened I would get an error message first before the rpc shutting down thing occured. When that happened, I could still use the computer as long as i didn't hit any buttons on that error message. So that's how I had the time to download the patches. If you aren't getting the first error, see if you can download them on another computer, and in the meantime just unhook the ones getting hit from the internet.
hth

[RenegadeKing]

Originally posted by lancefiles And how do you block Port 135 with a firewall?

Any firewall should do it. For some reason the one included with windows xp didn't seem to stop incoming connections on 135 tho.. But I'm sure any other firewall would work.

[whr2206]

yeah I did hae syegate firewall then by accident haha i installed a second one which was a big mistake and the 2 firewalls didnt get along so I delted them both.. ive been meaning to get a new one though.. but i put off everything so0o go figure

[whr2206]

Well I get 3 error prompts right when i boot up...

WJview Error
ERROR: Could nt execute Main: The system cannot find th file secified

Generic Host Process for Win 32 Encountered a Problem and needs to close

Windows Cannot open this File TFTp324 then it said you can use the web to find a program to run it o select a program from a list

what are these from?

[doctorgonzo]

Go to Start...Run and type "msconfig". Go to the startup tab and post what is there. Odds are that those files are in the list.

[whr2206]

..blah I just tried 4 times I didnt x out the error prompt and it gave me the same RPC prompt again... if I can get a few minutes before it shuts down on me ill go into ms config take care of that and dl critical updates...