Help This Is Urgent

[daryll2006]

OK EVERYTIME I USE MY COMPUTER, A WHILE LATER IT WILL SAY "Remote Procedure Call has terminated unexpectadly, you will shut down in 1 minute" or summat like tht.,.. dus any1 know how 2 get rid of this please, its urgent... thnx xxxxxxxxxxxxx

 

[jimmymac]

if im right i think thats a form of virus, run any anti virus programs you have and hopefully it will clear the issue (believe its a blaster worm of some sort)

its takes advantage of a windows xp security flaw so once you ahve rid of the virus run the windows update program, should be a fix to prevent it happening

IF your system wont allow you time to either run an anti virus or download a virus program then go to Start->Control Panel->Administrative Tools->Services->Remote Procedure Call (RPC)->Recovery Tab and choosing "Take No Action" for all three choices.

Hi guys, I'm sure a lot of you were hit by this worm like i was! There is a patch to stop the shutdown but MSBlast is in fact a worm. It has pretty much a stupid purpose, to launch a DoS attack on Microsoft Windows Update! So firstly, lets get the patch to stop the annoying dialogue that pops up and then we'll gte rid of the actual file itself.

Get the patch from http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

Then on your computer hit CTRL, ALT and DELETE and find MSBlast.exe in the running processes (under processes tab in Windows XP). End the process then go to your windows folder and to system32. If system32 is not seen, then it must be hidden so just type c:\windows\system32 in the address bar. Delete the msblast.exe file. Now the actual file itself is gone but, it was set to boot with your computer so next time you boot your computer, you would get a message saying that it cant find the file. But you can remove it from startup easily by clicking start - run and type msconfig. Click the startup tab and uncheck it. Now it wont be set to boot with the computer but it wont disappear from the list on its own so if you're like me and dont even like having it in the list, do the following instead!

Click start - run and type regedit. Now navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run and remove the string with the value msblast.exe. It should be called Windows Update or something similar!

Now hit the f5 key to refresh your registry. Close it and I recommend a reboot! Then when you reboot, go to http://www.windowsupdate.com and download any security updates for your OS. The reason for that is because if you (or I) had been getting the updates in the first place, we wouldnt have been effected by this worm at all! The worm itself is exploiting a Windows RPC Vulnerability discovered in most Micrsoft OS's.

So I hope you enjoy getting rid of that annoyance

that was taken from another forum relating to that issue, hopefully that helps

 

[daryll2006]

lol

well thnx and i think its sorta worked but ive got my mate to reformat my pc for me tommorow so im fine. thanks for your help i appreciate it!

 

[computerhakk]

Yup you got hit by lovsan.

You just need to patch up your OS. If the patch above is the right one.. it'll have u fix in no time.

EDIT: Great. Glad it worked for ya. Just remember to update and patch up any other future OS like XP in the future to prevent these occurances. SP1, SP2, security patches, etc..