I have a brand new HP Multimedia Computer running XP.
When I access the internet through Dial-up, it will stay
on line for a few minutes but eventually I encounter the
following error and the computer shuts down in 50s:
NT/Authority System
Message:
Windows must now restart because the RPC service
terminated unexpectedly.
Help!
Anja Thoreson - 21 Aug 2003 20:06 GMT
>-----Original Message-----
>I have a brand new HP Multimedia Computer running XP.
[quoted text clipped - 9 lines]
>
>Help!
I just went through this myself, you have the worm MS
BLAST!!
First of all, put up a firewall and you won't get kicked
out anymore.
To do so go to "My computer" then "Network Connections"
right click the icon that you use to connect to the
internet. Go to "properties" then "advanced" and click the
box to put up the firewall.
Once you can stay on the net, go to the microsoft website
and download a patch they have for the worm and follow
their instructions. They have a chapter that tells you
what to do once you have the worm.
Also a great free web based program from www.trend
micro.com called "house call" will identify all of your
infected files. Just search the net on how to get rid of
the worm, I just took the last infected file off. Good
luck!
Malcolm Jobling - 22 Aug 2003 01:45 GMT
Hi!
Had the same problem last week (Tuesday). Sounds like
you've picked up the new 'blasterworm' virus. windows
update will help if you can stay on line long enough
followed up by advice from your anti-virus software
provider.
Good luck!
Malcolm J
>-----Original Message-----
>I have a brand new HP Multimedia Computer running XP.
[quoted text clipped - 11 lines]
>
>.
Larry Samuels MS-MVP XP \(Shell/User\) - 22 Aug 2003 03:36 GMT
Go to http://www.kellys-korner-xp.com/xp_qr.htm#rpc and download the removal
tool.
Run the tool to remove the worm,then follow the onscreen prompts to download
the patch.
Make sure you download the 32bit patch if you are running XP.
There are more variants out now.
The exes for 2 of the variants are teekids.exe and penis32.exe
Kelly's script kills all known variants.
As more variants are found Kelly and Doug are adding removal instructions to
the script to kill them as well.
If you are having trouble staying up to get the patch and removal tool:
When the shutdown prompt appears,go to start/run and type
shutdown -a to abort the shutdown process to allow you to stay up and
online.

Signature
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone - www.microsoft.com/windowsxp/expertzone
> I have a brand new HP Multimedia Computer running XP.
> When I access the internet through Dial-up, it will stay
[quoted text clipped - 8 lines]
>
> Help!