Windows RPC Errors / New Virus

Post by **BuudWeizErr** » Mon Aug 11, 2003 8:20 pm

Since I know some of you will start getting this....

The virus pops up a window talking about A Remote Procedure Call being shut down by NT Authority/System and you have 60 seconds before it shuts down your computer. Here is the information you need to fix it.

How to fix: http://www.microsoft.com/techn...6.asp

How to prevent shutting down after getting the message: 2000/XP: Start > Run > "cmd" 95/98/ME/NT: Start > Run > "command" Go to the DOS prompt and type: shutdown -a

If the patch links go down off of MS's site, I have them on my comp and I will mirror them.

I would like to thank whoever started this. I will make about 200 dollars from just this virus alone. I had 3 service calls today just for this virus. However, it doesn't seem to be hitting firewalled networks as hard. My friends who are behind hardware firewalls haven't reported the virus, and a couple of my networks are holding up fine to this....

Dialup users are just as vulnerable.

There is also a variant that closes the Ctrl-Alt-Delete Box and Registry editor 1 second after opening. I am not sure if these fixes will fix that also.

Post by **corn322** » Mon Aug 11, 2003 8:20 pm

awesome. this started happening to me yesterday, check my thread titled "anyone good with xp" or somethign like that. damn thing is anoying as hell

Post by **corn322** » Mon Aug 11, 2003 8:20 pm

also, that link gave me a 404

Post by **nomuken** » Mon Aug 11, 2003 8:20 pm

worm != virus

Post by **BuudWeizErr** » Mon Aug 11, 2003 8:20 pm

corn322 wrote:also, that link gave me a 404

Fixed.

nomuken wrote:worm != virus

Thank you Captain Obvious.This isn't a computer board. You have to put stuff like this in Laymens (sp?) terms. Everyone knows what a virus is. Not everyone knows what a worm is... or a trojan...

Website · Post by **TurboKA37** » Mon Aug 11, 2003 8:20 pm

HAHAHA it says windows ME is unaffected!!!!! i knew going for the cheaper/harder to use/ more prone to viruses OS would pay off one day

Post by **[Zero-S]** » Mon Aug 11, 2003 8:20 pm

lol...its microcraps fault they left that stupid hole open... Looks like I'm unaffected to. Yay for Linux.

Post by **Thee 240sx Owner** » Mon Aug 11, 2003 8:20 pm

Shut up.. One of my servers at home got hit.. damn kids and their jerking off to nude pics online self... hate that....

Post by **[Zero-S]** » Mon Aug 11, 2003 8:20 pm

RacinDa240sx wrote:Shut up.. One of my servers at home got hit.. damn kids and their jerking off to nude pics online self... hate that....

You have kids? I thought you were like 18?? Or maybe I misread that...

Post by **90Q45blue** » Mon Aug 11, 2003 8:20 pm

Hey I want to add to what Buud said. If you're getting the NT AUTHORITY/SYSTEM is shutting down your system in one minute deal:

Go to Start, Settings, Control Panel, Administrative Tools, Services:

Find Remote Procedure Call. Right-click, left-click on properties. Go to the Recovery Tab. Under First Failure, Second Failure and Subsequent Failure there are drop-down boxes. Select "Take No Action" for all three. Then apply and ok. This will give you enough time to download all the updates.

Nick

Post by **BuudWeizErr** » Mon Aug 11, 2003 8:20 pm

Yeah, but that is just a temporary fix. Windows is supposed to shut down if it gets RPC errors. Go to the command prompt and type "shutdown -a" when that box pops up. That will give you time to download.

Website · Post by **TurboKA37** » Mon Aug 11, 2003 8:20 pm

howed this worm/virus hit so many ppl at the same time? was there some type of automatic windows update that messed ppl's comps up or sumthin?

Post by **[Zero-S]** » Mon Aug 11, 2003 8:20 pm

Theres a security hole that microcrap didn't bother to patch. The worm scans the intarnet for computers with that vulnerability and expliots it, implanting itself in the affected systems. Have fun tryin to remove it...

Post by **Get240DiZzY** » Mon Aug 11, 2003 8:20 pm

Say... I have a computer (not currently hooked up to the net, but planning to) with XP. Would it behoove me to burn the patch onto a disk, and run it on the compy downstairs?

Post by **[Zero-S]** » Mon Aug 11, 2003 8:20 pm

Yes.Unless you're on a hardware firewall...then you have a choice.

Post by **Get240DiZzY** » Mon Aug 11, 2003 8:20 pm

I do have a firewall running, actually. But I think I'll do it anyway. Can't hurt, right?

Post by **[Zero-S]** » Mon Aug 11, 2003 8:20 pm

No it can't hurt, I reccomend it...

Post by **Thee 240sx Owner** » Mon Aug 11, 2003 8:20 pm

Firewalls apparently aren't helping with this virus either unless the ports on them are shut off.. Don't ever setup a firewall and leave default settings. unless your an advance user.. (me) Close all ports.. and run a damn software firewall as well as AV... and btw i wasn't talking bout kids dling stuff i was talking bout the people who made this virus.. LoL i was gonna say.. don't scare me like my last gurl did and said she was pregnant. Kids no .. who are you?? lol

Post by **[Zero-S]** » Mon Aug 11, 2003 8:20 pm

You know that on August 16th all computers infected (that haven't been cleared up yet) will launch a nice DoS attack on M$. Serves them right for putting together $hitty software.

Post by **op.tic** » Mon Aug 11, 2003 8:20 pm

good thing i patched allready, seems like this is spreading pretty easily

Post by **[Zero-S]** » Mon Aug 11, 2003 8:20 pm

So is the forum scare over yet?

Windows RPC Errors / New Virus

Windows RPC Errors / New Virus

Nissan Forums

Infiniti Forums

Datsun Forums

Technical Forums

Classifieds / Marketplace

Nissan Motorsports

General Forums