"RCP" Remote Call Procedure "56k"

[DDR-PIII]

My OS is windows server 2003 "standard", i keep on getting an unexpectedly terminated remote call procedure, then it gives me 59 seconds to close what im doing cuz its gonna shut me down. It's not the OS, I have had enterprise edition in and it gave me the samething, and ive also tryed two different mode modems "56k" one a software driven one and the other a hardware driven one, does anyone know what causes this problem ? it said something windows termanating one of the svchost.exe's and blah blah blah... any help would be great :) if i cant get any i suppose i can go back to xp pro, actually i turned off some setting for this modem "hardware flow/error controll" so im gonna be on for awhile and ill see how this works, but still if you know whats causing it please lemme know :) thanks

-DDR

[TheCrow]

You´re coomputer is infected with Mblaster virus.
Download microsoft patch and a virus fix (norton, mcaffe, panda, etc).
You caan stop from shutting down if you go to admin tools-->services---> RPC (open it)--->recovery---> and choose "take no action" on the failures boxes.

If you go Task manager you will find Mblaster.exe in the processes running. If its there them you will be sure that Mblaster virus is in your PC.

read more about it here:

http://forum.oc-forums.com/vb/showthread.php?s=&threadid=223261

[nahmus]

hmmm well i guess that answers the question if 2003 can be infected. I think this is the first one I've heard about first hand.

[DDR-PIII]

thats really strange, i dunno how it happened, because i just installed the OS, then went on the net to downlaod MSN Messenger, and then i opened up MSN messenger, i was on it for 5 mins and then i got that RPC error :/ strange, well yeah if it is some virus it infected server 2003 enterprise edition and Standard edition

[nahmus]

do a search for msblast.exe thats the worm file that CAN cause shutdowns. You might not be infected at all and could have another problem

[mbentley]

Originally posted by nahmus
do a search for msblast.exe thats the worm file that CAN cause shutdowns. You might not be infected at all and could have another problem

it could be something else, but i bet you he is infected... if you want quick answers, check the link in my sig. it leads you directly to the files you need to fix it.

[stompah]

mbently did you ask a admin if you can link to yoru site in your sig? If not you have been here long enough to know the rules :(

[Diggrr]

He may not necessarily be infected.
My wife's computer, running XP Pro w/sp1 would do the same thing, though only when it was logged onto the net. I ran the searches for the suspected filenames (there's another besides msblast.exe, mslaugh.exe from blaster.e) and they were not present.
I looked for the registry keys, and she didn't have them.
I tried running the removal tools on symatec's website, and it said that she was not infected.
She runs norton's av fulltime and has autoupdate running, so her computer has daily access to updates (ran it manually, and it didn't need to update anything).
She's networked to my computer, and I don't have it either, and had no shutdown issues. My comp runs 16-18 hours a day.

What did fix the shutdown issue though was downloading and installing the patch from windoze update.

I don't know what triggered the problem if it wasn't the virus, but the winpatch did fix it.

That's just what I found anyway...get thee to winupdate!
The file is an executable, so you can download it with another computer and transfer it/run it on yours if you can't stay running long enough to get it with yours.

[Numbstruck]

then went on the net to downlaod MSN Messenger, and then i opened up MSN messenger, i was on it for 5 mins and then i got that RPC error

heh...the first time I noticed I had the worm, was when I opened MSN messenger and I was on it for like 2 mins and then that crap started popping up

[DDR-PIII]

Yeah, I did not have any type of virus, but it was still wanting to restart, so i just told it in services to do nothing when RCP was acting up, but while doing that my sound card took a hit, my sound card requires RCP to be started in order for my sound card to work :(

[TheCrow]

Just apply the windows Patch...

There are other virus that affect rpc.
Here´s a list from Network Associates:

W32/Raleka.worm
W32/Nachi.worm
W32/Gaobot.worm.y
BackDoor-ARR
Stealther

[XWRed1]

What is RCP? Never hard of it.





Or do you mean RPC?

[rogerdugans]

I would say it's the virus, even if it is yet another new variant. :(

One definite clue: if the RPC error only comes up when you are connected to the internet.
Pull your network cable out to check: if there is no error and no reboot when you are NOT connected, a virus has gotten in.

Having the MS patch fix the issue is another likely sign that some variant/virus has infected you.

Two things:
* if you are on broadband of any type use a gateway router or other firewall device that will give you control of your TCP/IP ports
* Use some type of software firewall on each pc behind the hardware firewall: this gives you two levels of protection.

While simple NAT routers are not serious security devices they do protect pretty well. The second level of a software firewall can give you control of what programs are even allowed to access anything outside your pc- all disallowed traffic is stuck.
Using the two together is more than twice as strong as either, IMO.

[DDR-PIII]

Originally posted by XWRed1
What is RCP? Never hard of it.





Or do you mean RPC?

yeah, thats it.

Originally posted by TheCrow
Just apply the windows Patch...

There are other virus that affect rpc.
Here´s a list from Network Associates:

W32/Raleka.worm
W32/Nachi.worm
W32/Gaobot.worm.y
BackDoor-ARR
Stealther

I used the stinger virus scanner it came up with nothing and i did apply the windows patch, but i still have no sound :(

[TheCrow]

Reinstall sound caard drivers.

[XWRed1]

Was sound working before?

Iirc you have to turn something on in Win2k3 before sound works.

[Diggrr]

Originally posted by rogerdugans
I would say it's the virus, even if it is yet another new variant. :(

I thought about that too, but no dice. I checked for files according network associates and sarc.
I only have dialup here too. I'd like broadband, but it seams my tiny neighborhood doesn't present them with enough profit potential to run it another 200 feet....I can see the cable from here... :mad:

Sorry for the late reply, been ghosting/adding drives.