|
|||||||
 |
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
08-11-2003, 02:59 PM
|
#1 |
|
Professional gadfly
Join Date: Jan 2002
Location: Minneapolis, MN
Posts: 6,364
 |
What to do if you get an error message about RPC (Remote Procedure Call)
A lot of people have been getting error messages about RPC shutting down unexpectedly, leading to a reboot of Windows. This is affected Windows XP, Windows 2000, and Windowx NT.
All you need to know about this problem, as well as what you should do, can be found here: http://securityresponse.symantec.com...tent/8205.html To summarize:
Last edited by doctorgonzo; 08-11-2003 at 03:26 PM. |
|
|
|
08-11-2003, 03:54 PM
|
#2 |
|
Member (9 bit)
Join Date: Jun 1999
Location: CLEVELAND
Posts: 480
|
Thanks I'll give this a go
MB |
|
|
|
|
08-11-2003, 04:58 PM
|
#3 |
|
Staff
Premium Member
Join Date: Jul 1999
Location: Arlington, TN
Posts: 5,538
|
More info here as well. Symantec has also issued a security response and update virus definitions for the W32.blaster.worm which makes use of this exploit.
|
|
|
|
|
08-12-2003, 07:57 AM
|
#4 |
|
Premium Member
Join Date: Jun 1999
Posts: 9,231
|
Doctorgonzo: Thanx for the info that a number of people have found useful. This thread was added to the XP/2k FAQ (and-you-thought-it-was-dead) section.
I'll sticky this thread up while WORM_MBLAST.A remains a top threat. Cheers |
|
|
|
|
08-12-2003, 06:43 PM
|
#5 |
|
Member (7 bit)
Join Date: Nov 2002
Location: Tennessee
Posts: 110
|
RPC Problem with XP
I have a new pc with XP. I have gotten the RPC error message :
"Error #711 Cannot load remote access" "Remote procedure call terminated unexpectadly" "RPC Server unavailable" Network connections folder is completely empty. Users folder is empty. Phone and modem folder cannot open. "You may have trouble starting telephony service." Got the worm, I guess. First: I have downloaded from one source only and I don't open any e-mail from anyone I don't know. But apparently the worm has gotten me anyway. Second: I don't have the reload or format disks for XP yet. Can I create a MSDOS start-up disk on floppies and reload XP from them? I started to create disks but it says that it will erace everything on the harddrive first. Should I proceed? I cannot get updates or patches on that pc because It has wiped out any possibility of reinstalling my isp. I have never created startup disks without the cd back up before, and I don't know what to expect. Thanks, Darlene |
|
|
|
|
08-13-2003, 06:20 PM
|
#6 |
|
Member (8 bit)
Join Date: Dec 2001
Location: FT WORTH TEXAS
Posts: 130
|
you dont have to open any e-mail at all get get that worm,all you got to do is be on the internet to get it.
|
|
|
|
|
08-13-2003, 06:33 PM
|
#7 |
|
Member (7 bit)
Join Date: Nov 2002
Location: Tennessee
Posts: 110
|
Now what?
That much I have learned.
I have it so bad that I cannot even manually rid my pc of it. Cannot connect to internet. The instructions say go to computer management and open properties of RPC Service and change settings. I am not able to even open properties! I was able to use this pc (w/W98) and go to ms downloads to download the patch to disk. But it is useless until I get rid of the worm. Lesson learned far too late: DO NOT IGNORE MS CRITICAL UPDATES! About the reboot disk? Should I attempt to create them? |
|
|
|
|
08-13-2003, 07:02 PM
|
#8 |
|
Member (8 bit)
Join Date: Dec 2001
Location: FT WORTH TEXAS
Posts: 130
|
well i has to reinstall windows on my i could not do aht thing all my self.
|
|
|
|
|
08-14-2003, 06:54 PM
|
#9 |
|
Member (8 bit)
Join Date: Jul 1999
Location: Troy, Mo.
Posts: 213
 |
Got the worm monday on my PC. This one, my sons, is fine. I thought that it was no big deal for me as I wanted to reformat my drive and partition it off anyway. The worm was a good excuse to do it now. BUT....did the total reformat. COMPLETELY WIPED OUT THE HARD-DRIVE and did a fresh install of Windows XP. Went out to get the latest updates and what pops up. That darned RPC shutdown error. Now is it possible that I picked it up again that fast on the Windows update page. How am I suppose to stop it if I can't download the updates? Sooo....frustrating. I have McAfees online virus scan...obviously useless if I am going to get it everytime I go on line. What can I do to stop this thing?
|
|
|
|
|
08-14-2003, 07:07 PM
|
#10 |
|
Member (8 bit)
Join Date: Dec 2001
Location: FT WORTH TEXAS
Posts: 130
|
that just what it did to me about 5 times as soon as i hook up my cable model i has it 5 time .i put windows me back on my comp down loading patch.then reinstall xp alot work but that what i has to do .
|
|
|
|
|
08-14-2003, 07:25 PM
|
#11 |
|
Member (12 bit)
Join Date: Dec 2002
Location: essex
Posts: 2,252
|
down load the patch on anothe computer and save it to a flopy or cdrw then run it on your computer befor going on line
__________________
Join the PcMech.com Folding@Home Team and Help Save Lives! Click Here! Life only looks greener on the other side of the fence |
|
|
|
|
08-14-2003, 07:28 PM
|
#12 |
|
Member (8 bit)
Join Date: Dec 2001
Location: FT WORTH TEXAS
Posts: 130
|
i had no way to do that ,wish i could have.
|
|
|
|
|
08-15-2003, 09:06 PM
|
#13 |
|
Member (6 bit)
Join Date: Jan 2002
Location: ontario canada
Posts: 40
|
try a firewall like zonealarm if you are going to be on the internet,i have seen malicious code shutdown both mcafee &norton av,use avg from www.grisoft.com it is also free
|
|
|
|
|
08-20-2003, 05:34 AM
|
#14 |
|
Banned
Join Date: Jul 2003
Location: Sydney, Australia
Posts: 120
|
In regards to XP boot disks, the only ones worthe worrying about when it comes to reinstallation are the ones listed here: www.bootdisk.com/bootdisk.html
They will get you into the DOS end of setup, where you can format and change file systems etc. After which you can go thru the process of Windows componenets etc. An MSDOS start-up disk created in My Computer does nothing for you. |
|
|
|
|
08-20-2003, 01:03 PM
|
#15 |
|
Member (9 bit)
Join Date: Mar 1999
Location: Michigan, USA
Posts: 445
|
Does downloading the patches from this site work even after you've been hit? Or do you have to reformat and upload the patch to prevent future infections?
|
|
|
|
|
08-20-2003, 04:40 PM
|
#16 |
|
Member (10 bit)
Join Date: Sep 1999
Posts: 883
|
About firewalls and closing port 135.First: I herd to also shut off 69. Does ZA and some of the others alow you to write rules? I have Sygate pro and it does. But I didnt know if the free ones let you.
Second Question, would the firewall's ZA etc... caught that worm on there own? I have my doubts. I know that the firewall in XP didn't catch it for some of my friends. |
|
|
|
|
09-14-2003, 12:12 PM
|
#17 |
|
Member (4 bit)
Join Date: Sep 2003
Location: Shakespeare Country
Posts: 11
|
Well all I do on most of my clients is just update to at least service pack 2 on win2k machines, run Stinger which removes the virus then use the patch to update the RPC flaw. Seems to work for us anyway.
|
|
|
|
|
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
Linear Mode
