RPC shut down error!

[Philr]

Hi, would like help with an error msg/behaviour that started happening yesterday. believe i might have some unwelcome 'tweaks' to my system.

i'm regularly getting the dialog:


------------------
"this system is shutting down. please save all work in progress and log off. any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEMA

Time before shutdown: 00:00:60

message:

Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly.


------------------


can anyone tell me if I've been infected by something? i think it's to do with svchost.exe as well

I'm only able to internet for a few moments before this keeps happening :\

imagine i have a re install coming up....

cheers for any advice
Phil

 

[mojaam]

You too. I also get this. @ 1st is a pop up call Generic Host Process for Win32. If I close it it pops what he said. If I leave it for a few mins, same thing. So I researched and read a thread and I accidently stopped an essencial "service" call Remote Control S.... Now Windows doesnt laod up proper and other stuff. Im panicing like crazy and in need of help.

 

[dohyun]

im getting this too !!! hellllppppp1!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!11

 

[mojaam]

Oh no its doin it again.

 

[jazzisjazz]

I disabled the network admin messaging in xp and started to get this message also. I cannected mycable modem to another pc and it transferred to this one also

jazzisjazz

I can only stay up for 3-4 minutes ata tmie

 

[LordThing]

check for a file in your startup called msblast.exe disable it. My corp environ is currently being hit with this. I think it's a new virus attacking xp machines. Also patch your computer.

 

[mojaam]

Yeh I found a patch. But I accidently disabled the svchost servise and now windows is messed up. So I cant copy n paste (1 of the many side effects). How do I enable it again?

 

[BSEagle1]

Having same problem. It's doing it again. Deleted msblast.exe . No results.
HEEELLP

 

[elzmaddy]

Yeh I found a patch. But I accidently disabled the svchost servise and now windows is messed up. So I cant copy n paste (1 of the many side effects). How do I enable it again?

I've spent some time trying to research this. Is it even possible to disable Service Host?? I went into the Serivces management console (start->run and type services.msc) but there are several services linked to svchost.exe including "Server", "routing and remote access," "remote registry," etc.

What I can suggest is for you to go to START->RUN and type cmd.exe then press enter. In the black window, type "net start server" and press enter. Perhaps this will start the svchost.exe. If not, maybe you can look at your services list and start for stopped services. Try to enable and start services linked to svchost.exe.

 

[mojaam]

I've spent some time trying to research this. Is it even possible to disable Service Host?? I went into the Serivces management console (start->run and type services.msc) but there are several services linked to svchost.exe including "Server", "routing and remote access," "remote registry," etc.

What I can suggest is for you to go to START->RUN and type cmd.exe then press enter. In the black window, type "net start server" and press enter. Perhaps this will start the svchost.exe. If not, maybe you can look at your services list and start for stopped services. Try to enable and start services linked to svchost.exe.

Thx, but @ the command, it says it's already started. Then if I type services.msc, Nothing shows up on the extended tab whisch is where it was disabled in the 1st place.

 

[Neal]

I am having the same problems on my system as well

I cant open the task manager to look at my processes either by using ctrl-alt-del..

Is the only fix for this to reformat?

I have no idea what caused it but from the looks of things this is becoming a common problem

I'll keep checking this thread for updates..

Thanks!

 

[awolkoff]

Does this help?

Link

 

[speed01]

link 1
link 2
link 3
link 4
link 5

That should get you in the right direction...

Speed

 

[jazzisjazz]

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

Software downloaded at this link seems to have worked for me

jazzisjazz

 

[jazzisjazz]

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

Software downloaded at this link seems to have worked for me

jazzisjazz

[L=]http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp[/L]

 

[Neal]

If I have the worm, is downloading the msft patch enough or do I need the mcafee/norton fixes as well?

Also, after I install the patch should I search for msblast and delete all its traces?

I would read through all the threads but my IE is messed up and for some reason wont let me open them in new windows...

Thanks in advance

 

[speed01]

Just installing the patch is not enough. You must also remove the worm from your system. If you can get to here it will tell you what to do..

Speed

 

[Neal]

Thanks for the link

 

[Macro2]

I'm shocked so many people are running without a router...

Mac

 

[Neal]

another question,

I have installed the msft patch and read through mcafee's site (I dont have mcafee anti-virus though)

I followed the directions to delete msblast from the system registry but it is not in there...

however, when I search my HD I find to msblast files in c:\windows\prefetch and c:\windows\system32

my question is, can I just go ahead and delete them from there?

Thanks