NT/Authority\System

Nemesis

Just started getting this error message last night.
And just happened twice again this morning.
I use UTVip.
'Windows must now restart because the remote procedure call (RPC) service terminated unexpectedly'

I used Oceanfree to browse boards and post this message and havent had that message.
Any ideas?
Nem
just happened on oceanfree..shutting down in 34 secs..sigh

Nemesis

Just found a fix here:
http://www.techspot.com/vb/showthread.php?threadid=6651
I hope..sounds scry.
Nem

Eurorunner

You still need to run this to destroy the evil worm:

symantec worm removal tool


This thing is incredible..dont think theres been something as rapid as this before.

Nemesis

Ran that and it found the worm.
Glad I came baq here to check.:).
But how did i get it?.

Eurorunner

But how did i get it?.

Everyone got it m8...least everyone who hadnt applied the patch. A security flaw/hole/vulnerability was discovered with windows operating systems..which allowed access to a windows based system via a particular port...(forgotten the port no..). So the nasties out there put together a worm that exploited this vulnerability...which bounced from machine to machine..hammering pcs around the world.

Nemesis

So it wasnt that 'movie' I downloaded then?.;)
Well calling it a movie when all I can get is ISDN is a laugh!.
And to think I updated my XP only last month..seems I better enable the update again..even if it is annoying when it kicks in.
Nem

andrew163

Originally posted by Eurorunner
a particular port...(forgotten the port no..).

Port 135

ahhh the joys of having the non-vunerable windows 98 (never thought i'd hear myself say THAT)

BKtje

i think it can also use port 136-139 and 4444.

ando

hmm, unusual. The only place i've heard of this thing is here on boards.ie
You must all be non firewalled idiots

Gav_b

I'm on IOL and am getting connection attempts to port 135 every minute or so from about 20 different IP address in my subnet. Seems alot of people are infected.