RPC Terminated Unexpectedly

[Hazizi]

I would like to know why my new laptop always restart
suddenly because "RPC Terminated Unexpectedly". It will
restart within 1 minutes. Cant do anything about it. I'm
using Windows XP. Now its become worst. Please advice how
to fixed it.

 

[Rick \Nutcase\ Rogers]

Hi,

When the shutdown warning appears, click start/run and enter "shutdown -a"
to halt the process. It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Carey Frisch [MVP]]

There are thousands of nasty computer viruses/worms looking for unprotected
computers. Your computer can be infected within a few milliseconds the moment
an internet connection is established if your computer is not properly secured.

Apparently, your computer is now infected with the W32.Blaster.Worm or one of its variants.
This happened because you have not been using an internet connection firewall and have
apparently neglected to install the critical updates available at the Windows Update website.

------------------------------------------------------------------

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

------------------------------------------------------------------

Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

Special note if you use AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm infections from computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious Programs
http://support.microsoft.com/?kbid=824146

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

------------------------------------------------------------------------------------


|I would like to know why my new laptop always restart
| suddenly because "RPC Terminated Unexpectedly". It will
| restart within 1 minutes. Cant do anything about it. I'm
| using Windows XP. Now its become worst. Please advice how
| to fixed it.

 

[Guest]

Critical updates is your answer!! Sounds like the blaster worm issue...Go to Norton.com and check out security responses, or microsoft.com\downloads and click on the second security updates and download it to your desktop. But make sure your system restore is disabled prior to download all down loads. Second, once you downloaded the update turn your system restore back on and go back into microsoft.com/downloads and click on worm blaster download and save it to your desktop. Disable system restore, and back to the desktop and activate worm blaster patch. Also, make sure you restart after each activation. RPC will not count you down any more. It just happen to me this weekend!!! One more thing you must disable RPC in order to have enuff time to do the up dates. Click run; type in SERVICES.MSC space\S it will take you to services right click on the first RPC go to properties and set the first three dialog box to "return to services". This will disable the RPC counter and give you enuff time to do the necessary updates once all your critical updates are done go back into services and set all three boxes back to original settings