Xp weirdness can anyone help?
16 March 2004, 10:17 AM
#1
Scooby Regular
Thread Starter
Join Date: Sep 2003
Location: London(ish)
Posts: 1,194
Likes: 0
Received 0 Likes
on
0 Posts
Xp weirdness can anyone help?
I am seriously considering becoming a mac user 
Keep getting a weird dialog box coming up saying that the remote procedure call (RPC) service has terminated unexpectedly and the system will shut down in 60 seconds and it counts down.
Here is the blurb in the events history file. At first I thought it was a virus, but this is a brand new install - formated the disk 2 days ago, and put on xphome have installed SP1, but not the other updates yet...
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 15/03/2004
Time: 10:16:33
User: N/A
Computer: CLARKE
Description:
The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Any ideas?
Keep getting a weird dialog box coming up saying that the remote procedure call (RPC) service has terminated unexpectedly and the system will shut down in 60 seconds and it counts down.
Here is the blurb in the events history file. At first I thought it was a virus, but this is a brand new install - formated the disk 2 days ago, and put on xphome have installed SP1, but not the other updates yet...
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 15/03/2004
Time: 10:16:33
User: N/A
Computer: CLARKE
Description:
The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Any ideas?
16 March 2004, 10:25 AM
#2
Scooby Regular
Thread Starter
Join Date: Sep 2003
Location: London(ish)
Posts: 1,194
Likes: 0
Received 0 Likes
on
0 Posts
Event Type: Information
Event Source: USER32
Event Category: None
Event ID: 1074
Date: 15/03/2004
Time: 10:16:33
User: NT AUTHORITY\SYSTEM
Computer: CLARKE
Description:
The process winlogon.exe has initiated the restart of CLARKE for the following reason: No title for this reason could be found
Minor Reason: 0xff
Shutdown Type: reboot
Comment: Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 000000ff
Event Source: USER32
Event Category: None
Event ID: 1074
Date: 15/03/2004
Time: 10:16:33
User: NT AUTHORITY\SYSTEM
Computer: CLARKE
Description:
The process winlogon.exe has initiated the restart of CLARKE for the following reason: No title for this reason could be found
Minor Reason: 0xff
Shutdown Type: reboot
Comment: Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 000000ff
16 March 2004, 11:50 AM
#5
Scooby Regular
iTrader: (5)
Join Date: Mar 2001
Location: Cheshire
Posts: 2,895
Likes: 0
Received 0 Likes
on
0 Posts
You need to apply the following patch to your machine asap
http://support.microsoft.com/default.aspx?kbid=824146
Good luck
Nick
http://support.microsoft.com/default.aspx?kbid=824146
Good luck
Nick
16 March 2004, 01:06 PM
#6
Scooby Regular
Join Date: Feb 2004
Posts: 1,063
Likes: 0
Received 0 Likes
on
0 Posts
do a virus scan you definantly got a virus and it sdefinatly the blaster worm
http://downloads.pcpro.co.uk/Utiliti...-download.html
heres a link for the antivirus and other free downloads
click on the msblast remover
http://downloads.pcpro.co.uk/Utiliti...-download.html
heres a link for the antivirus and other free downloads
click on the msblast remover
Last edited by cong; 16 March 2004 at 03:40 PM.
16 March 2004, 02:33 PM
#7
Scooby Regular
Join Date: Feb 2002
Posts: 741
Likes: 0
Received 0 Likes
on
0 Posts
there's a setting on the IE settings tab which will cancel to shutdown element, than you can download the patch. Unfortunately I can't remember what it is and the search is down..!
If you can download from another PC, do a search for the 'Stinger' tool, this program will scan for blaster and remove very quickly.
post if you still have problems and I'll try to email you the stinger programme.
If you can download from another PC, do a search for the 'Stinger' tool, this program will scan for blaster and remove very quickly.
post if you still have problems and I'll try to email you the stinger programme.
Trending Topics
16 March 2004, 03:50 PM
#9
Scooby Regular
iTrader: (3)
Join Date: Dec 1999
Location: UK
Posts: 13,274
Likes: 0
Received 0 Likes
on
0 Posts
Start -> Run
compmgmt.msc /s (then OK)
Services and Applications
Services
Go to: Remote Procedure Call (RPC) [NOT: Remote Procedure Call (RPC) Locator]
Double click on it
Select the 'Recovery' tab
Set 'First Failure', 'Second Failure' and 'Subsequent Failures' to 'Restart the service' from the drop down menu.
You will get the errors come up, but at least you can then install the anti-virus software and get the updates.
Remember to change them back to 'Restart the computer' after you have finished.
compmgmt.msc /s (then OK)
Services and Applications
Services
Go to: Remote Procedure Call (RPC) [NOT: Remote Procedure Call (RPC) Locator]
Double click on it
Select the 'Recovery' tab
Set 'First Failure', 'Second Failure' and 'Subsequent Failures' to 'Restart the service' from the drop down menu.
You will get the errors come up, but at least you can then install the anti-virus software and get the updates.
Remember to change them back to 'Restart the computer' after you have finished.
16 March 2004, 04:02 PM
#10
Scooby Regular
Thread Starter
Join Date: Sep 2003
Location: London(ish)
Posts: 1,194
Likes: 0
Received 0 Likes
on
0 Posts
I didn't think it would be a virus, as it appeared as soon as I booted up! :O
But I managed to get the patch down, and it's all honky dorey now!
Cheers for the advice!
But I managed to get the patch down, and it's all honky dorey now!
Cheers for the advice!
16 March 2004, 04:15 PM
#14
Scooby Regular
Thread Starter
Join Date: Sep 2003
Location: London(ish)
Posts: 1,194
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by Andy Tang
I had to rebuild my PC recently. I was online for 2 minutes, and I mean JUST 2 minutes, and my fresh install of XP had the Blaster virus!!! 
I but it shut down quite infrequently so it gave me just enough time to download the patch, I assumed it was one that you got from opening attachments not just through the ports, the wee buggars.
Some of them I hear put stuff on ram too, so even an f-disck can miss it!
It's all sorted now, just need to get hold of a sneaky copy of xp, as lost my disk
got xphome but it needs to be activated, so will turn off in 30 days!
16 March 2004, 04:35 PM
#15
Scooby Regular
Join Date: Oct 2000
Location: same time, different place
Posts: 11,313
Likes: 0
Received 4 Likes
on
2 Posts
Lucky you. I could switch off the RPC problem, but couldn't disable ZoneAlarm, and ZA wouldn't let me onto the internet to download the patch - trying to protect me against viruses, it stopped me curing one 
. Gave the PC to the shop for them to sort it out.
Don't forget to change your RPC settings back again.
. Gave the PC to the shop for them to sort it out.Don't forget to change your RPC settings back again.
Thread
Thread Starter
Forum
Replies
Last Post