tech question

[KG]

what is 'Remore Precedure Call' and why is it unexpected termintaing and shuting down my computer?

[sujan]

1. check this out

Someone planted a trojan.

http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&threadm=%233Qzt14WDHA.3268%40tk2msftngp13.phx.gbl&rnum=1&prev=/groups%3Fq%3D%27Remote%2BProcedure%2BCall%27%2Bshutting%2Bcomputer%2Btrojan%26hl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3DUTF-8%26selm%3D%25233Qzt14WDHA.3268%2540tk2msftngp13.phx.gbl%26rnum%3D1

[bamademo]

2. This is happening to me also and I'm a Techie!

Scan for viruses. It started happening after I downloaded some music.

[geniph]

3. Definition

(RPC) A protocol which allows a program running on one host to cause code to be executed on another host without the programmer needing to explicitly code for this. RPC is an easy and popular paradigm for implementing the client-server model of distributed computing. An RPC is initiated by the caller (client) sending request message to a remote system (the server) to execute a certain procedure using arguments supplied. A result message is returned to the caller. There are many variations and subtleties in various implementations, resulting in a variety of different (incompatible) RPC protocols.

What OS are you using? Are you getting an actual error message? If so, what is the text of the message?

[slackmaster]

4. Possible worm - be very afraid

RPC or Remote Procedure Call is a protocol for making something happen on a remote Windows machine (or other computer). There are at this moment multiple evil worm programs that are spreading through the Net and causing havoc on Windows.

If you aren't protected by a firewall, get one! And check for viruses.

See http://isc.sans.org

[KG]

5. also getting message

windows can't open TFTP1552 and TFTP2036

[sujan]

6. check post 1

[Ohio Dem]

12. Exactly what my computer says.

It happened when I installed the dean.tv software. I'm not saying that it definately has anything to do with it, because I don't know for sure, but I'm thinking it might.

[KG]

7. my box used to be part of a nretwork

the box also mentions this has something to do with NT

[KG]

8. thanks guys will check it out.

been slack about my antivirus :(

[neohippie]

9. free virus scan available online

I think you can get a free virus scan online here

[LoneStarLiberal]

10. RPC Vulnerability

There is an RPC vulnerability "in the wild" right now that might be causing this. I'd suggest updating your copy of Windows immediately (everyone else who isn't sitting behind a firewall or ACL that blocks TCP/135 should do so too):

<http://windowsupdate.microsoft.com>

More on RPC vulnerability (Standford University alert):

<http://securecomputing.stanford.edu/alerts/windows-rpc-16jul2003.html>

Ideally, I'd suggest Red Hat, Mandrake, Debian, Gentoo, or some other flavor of Linux!

[tsipple]

11. Run Linux Without Switching to Linux

Go to the Knoppix web site to get a complete copy of Linux that runs entirely from a CD that you can boot on your computer. It doesn't touch your hard disk at all (unless you want). It just runs off the CD, no installation required.

That'll let you get your feet wet exploring Linux. An alternative is the "Live Eval" version of SuSE Linux, available here.

[dolo amber]

13. I just got mine sorted...

I went into start>run>msconfig>setup and unticked the TFTP files, then went to the place they were listed and deleted them. Did an update on my firewall and so far, so good...(fingers crossed)...I am decidedly NOT a techie ('cept in my own mind :P) but as I said, it seems to have worked thus far. You guys should know they can't have us all mucking about on these *subversive* sites, sharing ideas and such, it's un-AMURKIN!! :D

Good luck, everybody! :thumbsup: :toast:

[KG]

14. i'm on my other/old box now

can't keep the other on running long enuff to d/l an anti virus. guess i'll have to tote it somewhar and pay an outrageous price to get it cleaned. :(

[LoneStarLiberal]

15. W 32 Blaster Worm

<http://slashdot.org/articles/03/08/12/1326237.shtml?tid=185&tid=190&tid=201>

This links to Slashdot's discussion of this worm as well as a link to a security patch for it.