RPC Problem caused File Protection problem

  • Thread starter Thread starter David Evans
  • Start date Start date
D

David Evans

ok for several days i recieved an RPC message from
windows and shut down and rebooted as i was told to do. i
did not think anything of this as i was using resouce
hungry software at the time.

last night after i rebooted i was promted with a message
saying that Windows File protection needed the Win XP CD
to replace some system files. But windows does not access
the CD to remove anything from it. I have tried rebooting
with the CD in the drive and also placing the disc in the
drive when the promtp aprears.

I downloaded all approprate windows updates last night
and still the message apears.

I am running Norton 24/7 and also the inbuilt Firewall

no new software has been installed.

Does anyone know what could be causeing this message to
apear?


Regards

David Evans
 
-----Original Message-----
ok for several days i recieved an RPC message from
windows and shut down and rebooted as i was told to do. i
did not think anything of this as i was using resouce
hungry software at the time.

last night after i rebooted i was promted with a message
saying that Windows File protection needed the Win XP CD
to replace some system files. But windows does not access
the CD to remove anything from it. I have tried rebooting
with the CD in the drive and also placing the disc in the
drive when the promtp aprears.

I downloaded all approprate windows updates last night
and still the message apears.

I am running Norton 24/7 and also the inbuilt Firewall

no new software has been installed.

Does anyone know what could be causeing this message to
apear?


Regards

David Evans
.
Click to expand...
 
From the FAQs:

My computer is giving RPC Remote Procedure Call messages, or there is a TFTP
message on my computer, or my computer keeps locking up, or rebooting, or
telling me that it will reboot in 1 minute.
http://www.google.com/[email protected]

BTW, if you're hacked by this, just installing the MS03-026 patch leaves
your computer still hacked and still remotely controllable. You also want
to do this:

http://securityadmin.info/faq.htm#hacked

Also, note that the use of a windows root kit named "stealther" or
"winshell" in one of these exploits can make it so that neither you nor your
antivirus can see the infected files on your computer that allow hackers to
remotely control your computer. If this is the case, some of the ways you
can tell if you might have a root kit installed include:

- Look for unusual items when you run NETSTAT -A and FPORT [the latter is
free from www.foundstone.com/knowledge]
- Look for unusual outbound items in your firewall logs [such as TCP 6667,
TCP 8719, etc.]. If you're not already, use a firewall such as
www.sygate.com or www.kerio.com [both are free]
- Connect to the computer through the network from another Windows computer
and scan for viruses that way
- Move the hard drive as a slave to another computer that is known to be
virus free, boot to the other version of Windows and scan for viruses that
way
 
Back
Top