RPC error message

  • Thread starter Thread starter allan Corby
  • Start date Start date
A

allan Corby

RPC error message keeps shutting my computer down.
had techie over to look at it. at the same time he had
2 calls from 2 other xphome users with EXACT same problem
occurring at same time and day. after 2PM 8/2/11/03.

What is going on?
 
Read and follow the instructions in this article:

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

**** You need to make sure you have a FIREWALL enabled ****

Open XP's "Help and Support" and type: FIREWALL , and hit enter.
Click on the topic titled "Enable or Disable Internet Connection Firewall".

Additional information from Symantec:

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability
http://securityresponse.symantec.com/avcenter/security/Content/8205.html


--
Nicholas

---------------------------------------------------------------------------


| RPC error message keeps shutting my computer down.
| had techie over to look at it. at the same time he had
| 2 calls from 2 other xphome users with EXACT same problem
| occurring at same time and day. after 2PM 8/2/11/03.
|
| What is going on?
 
Hi Allan
Have you installed the security update for the RPC Buffer Overrun flaw?
http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

You may also need to activate a firewall, such as the one included with
Windows XP in the interim to block the exploit on ports 135, 139, or 445.

http://microsoft.com/windowsxp/pro/using/howto/networking/icf.asp
Workarounds: Right click the My Computer Icon/Properties/Remote. Uncheck
both boxes.
Go to Start/Run and type in: services.msc. Scroll down to Remote Procedure
Call (RPC)/Logon/First Failure/Restart the Service.

Worm.Win32.Autorooter
http://www.avp.ch/avpve/worms/win32/autorooter.stm
 
allan Corby said:
RPC error message keeps shutting my computer down.
had techie over to look at it. at the same time he had
2 calls from 2 other xphome users with EXACT same problem
occurring at same time and day. after 2PM 8/2/11/03.

What is going on?
Click to expand...

1) get a new techie

2) This is probably related to the security patch that MS put out in
mid-July to address this particular security hole. In a nutshell, you've
been hacked.

There's plenty of information at Microsoft's web site, and there have been
articles in the newspaper, on TV, and on the radio....

I can see how the average home user might have ignored these, but someone
who professes to be in the computer business should have at least heard
about it.
 
I started getting this problem and I noticed something that started running
on my computer "msblast" dose this have anything to do with this?
 
Back
Top