RPC Failure accross the domain

  • Thread starter Thread starter Yaron Bental
  • Start date Start date
Y

Yaron Bental

Hi,

We have seen a failure of RPC service at exactly the same
time almost across all servers one of our domains. In fact
all the servers that failed were on the same subnet. Some
machines on the DMZ Were NOT affected.

We are seeing in the event log massage:

The Remote Procedure Call (RPC) service terminated
unexpectedly. It has done this 1 time(s). The following
corrective action will be taken in 0 milliseconds: No
action.

Giving the latest msblaster spread out we thought it could
be it. However we are not seeing any other signs of
msblaster. We have tried to use the tools provided from
Symantec to verify if the worm was on there and it didn't
find it.

Is anyone else experiencing the same problem?

Any idea would be greatly appreciated.

Thanks very much.
 
yep it was the worm. it just have different behaviour when
you use terminal servers.

Thanks for you help.
 
Back
Top