Over the last week or so We've been getting random reboots on the Girlfriends computer.
XP Home All sevrvice packs installed today (was only missing 2)
Will edit momentarily its rebooting again......
Ok I'm back....
Anyhoo, before I was so rudely interupted...
I keep getting an error from NT Authority/System saying the Remote Procedure Call (RPC) Terminated unexpectantly and the computer must reboot in 60 seconds. So far 10 reboots since 9 AM. I've run Norton and its come up empty although the other day it found WC32.Spybot.Worm. I got that taken care of I thought.
What am I missing? Anyone have a clue?
/sigh.... its rebooting again grrrrrrrrrr
Make that 11 reboots today so far. This is driving me buggy
[ August 11, 2003, 04:13 PM: Message edited by: BookWyrm ]
Posted by TheTick (Member # 2883) on :
Here's a link to some security info at UC Davis. The RPC/DCOM issues referenced may be to blame. Otherwise, I'm not finding much.
Posted by saxon75 (Member # 4589) on :
My wife's computer is having the same problem. I do not look forward to trying to solve this one.
Posted by mackillian (Member # 586) on :
And now my computer as well. It's annoying as HELL! Posted by ak (Member # 90) on :
It's a worm taking advantage of a big security hole in windows. I fixed mine today.
Download the program here and run it. This is for XP home. This should fix it.
[ August 11, 2003, 04:59 PM: Message edited by: ak ]
Posted by asQmh (Member # 4590) on :
Or you could just go here; I did that 2 years ago and haven't had a problem with Windows (any flavor) since. . . .
Q.
Posted by ak (Member # 90) on :
It only takes a few seconds to download on cable modem. Anyone who has dial up and can't stay up long enough to receive it, I'll try to email it to you if that will help.
If you disconnect from the internet, you will stay up long enough to run it. Then after it reboots when installed, you are safe to reconnect.
Posted by TheTick (Member # 2883) on :
I had it right! That's the article referenced at UC-Davis (I guess the Californians got SOMETHING right). Posted by BookWyrm (Member # 2192) on :
Thanks guys.... installed the patch and so far running for 25 minutes without the reboot.
Heres hoping it sticks Posted by TheTick (Member # 2883) on :
All this searching just helped with my work - just had somebody with this problem, I slipped him the kb doc. Posted by ak (Member # 90) on :
Yeah, don't you feel super smart when you can do that? I am just elated that of all the computer geeks here, I was the one who had the fix first. Of course, the REAL computer geeks put this patch on their systems long ago <laughs>.
Posted by mackillian (Member # 586) on :
*whew* all fixed.
Posted by Maccabeus (Member # 3051) on :
Took me two frelling hours to find out what was wrong!! Then I got lucky--when I went to the student center to look for help I ran into a guy whose work computers had all just been fixed and knew exactly where to go...whew.
PS: Oh, and Bookwyrm? You're lucky. My computer was restarting every _five minutes_. I couldn't even find my way to the patch before it crashed.
[ August 11, 2003, 08:04 PM: Message edited by: Maccabeus ]
Posted by mackillian (Member # 586) on :
and just sent a friend over to the fix-it link. Posted by Kayla (Member # 2403) on :
So, idle curiostiy. If this isn't a problem, should we download the patch anyway? Ever since I downloaded the service pack, my computer has sucked in terms of speed and AIM hasn't worked right. I now hate downloading anything from microsoft.
Posted by ak (Member # 90) on :
If it isn't a problem then most likely the patch is already on your computer. Would it have been part of that service pack you put on?
Posted by Ela (Member # 1365) on :
Thanks for the info, ak. I started having this problem tonight. Now I just hope I can stay hooked up to the internet long enough to download the patch.
Stupid slow dial-up modem. Posted by Kayla (Member # 2403) on :
I doubt it. BookWyrm had most of the service packs it seems and it happened to him. I'm missing more than he was. Like I said, ever since I downloaded that first Service Pack, I've been afraid of the patches.
Posted by mackillian (Member # 586) on :
maybe one of those patches will fix the AIM problem. Just download all the ones it scans and says you need and install them. Posted by Troubadour (Member # 83) on :
In a weird and freaky twist of fate my sister called as I was reading this thread with exactly this issue.
Posted by BookWyrm (Member # 2192) on :
UPDATE!
A new Worm is out. MSBlast. Anyone with an NT version of Windows should be able to see it in the Task Manager listed as a process.
Just discovered yesterday (late) by Norton. Here is the info:
Let's all pause for a moment and thank the hacker bastards who described this vulnerability to the public before letting Microsoft quietly release a patch for it, shall we?
Posted by Ela (Member # 1365) on :
I downloaded and ran the patch last night, and my computer runs fine now, no crashes and reboots. If you had this problem, make sure you download the latest virus definitions and run a scan, as you may have the virus on your computer.
Apparently our computer was still infected with the ms.blast.exe virus. My husband downloaded the updated virus definitions from Symantec before he left for work this am, and left the computer running a viral scan. When I woke up, I saw the message, "1 infected file, unable to repair, suggest you quarantine." So I quarantined it. When I re-ran the scan, it shows no infected files. "Reports" shows the virus in quarantine and suggests I repair it - is it urgent that I do it right away, or is it "safe" in quarantine?
**Ela**
[ August 12, 2003, 10:08 AM: Message edited by: Ela ]
Posted by BookWyrm (Member # 2192) on :
In theory its safe in quarentine but theres a removal tool at nortons here:
This will remove it from your system.
Posted by Ela (Member # 1365) on :
I am already aware of the repair tool. My question is how urgent is it that I use it right away, if the virus is quarantined?
**Ela**
Posted by ak (Member # 90) on :
My understanding is that XP home systems don't get infected, they just reboot. Is that correct? If there is no process running called msblast am I clean?
Posted by Ela (Member # 1365) on :
My XP system on my home computer got infected, ak. It never hurts to run a scan.
**Ela**
[ August 12, 2003, 01:03 PM: Message edited by: Ela ]
Posted by Ela (Member # 1365) on :
So I ran the virus removal tool, and it told me the virus was not detected on my computer. I am assuming this is because the virus is in quarantine. Do I have to take the virus out of quarantine to remove it from my computer?
**Ela**
Posted by TomDavidson (Member # 124) on :
You can also tell your AV software to simply delete the file in quarantine, and it will.
Posted by fugu13 (Member # 2859) on :
There was already a patch. Which the government told everybody to apply last week. (Yes, it was the government that publicized this hole so widely -- because it was so big, and there was a patch out).
Posted by Ela (Member # 1365) on :
Why does it say, "Warning, are you sure you you want to permanently remove this item from your system?" when I click to delete the "msblast.exe worm"? It's not connected to something vital to my computer, is it? Are you sure it's ok to just delete it?
(I'm ignorant and nervous about screwing up my computer.)
**Ela**
Posted by TheTick (Member # 2883) on :
Yes, you are safe to remove it. It says that no matter what file is quarantined.
Posted by TomDavidson (Member # 124) on :
Fugu, the problem is that the defect was publicly detailed -- and an example exploit even written and released -- a week BEFORE there was a patch, and that this gave virus authors time to come up with a worm. In my experience, it takes about two months from the time Microsoft releases a patch for people to run Windows Update -- because people are stupid. This isn't a concern for small networks or corporations, this worm, but it's a HUGE issue for home users and college students who don't know how to maintain their machines.
[ August 12, 2003, 05:09 PM: Message edited by: TomDavidson ]
Posted by fugu13 (Member # 2859) on :
You have a higher opinion of corps than I do. The company I work at was hit.
IIRC, the patch was released before the exploit. I'll check for sources.
Posted by fugu13 (Member # 2859) on :
The story points out that it was made public a month ago, and that thus it was assumed most major companies were able to patch. Which implies that a patch was available.
Yep, patched back in March.
Posted by Ela (Member # 1365) on :
Just for the record, my husband just told me that the word at his place of business is that the patch and/or the virus removal tool may be incomplete, and that they were advised to avoid going online as much as possible.
*Ela**
Posted by mackillian (Member # 586) on :
Like I want to cut off my right arm. Posted by TheTick (Member # 2883) on :
Ela, the Windows 2000 version of the patch provides 'incomplete protection', but the rest of the OS versions are fine.
![[Mad]](mad.gif)
![[Wink]](wink.gif)
![[Smile]](smile.gif)
![[Wall Bash]](graemlins/wallbash.gif)
Then I got lucky--when I went to the student center to look for help I ran into a guy whose work computers had all just been fixed and knew exactly where to go...whew.![[Party]](graemlins/party.gif)