Windows 59 Seconds to post this, argh

As soon as I start my computer (Windows XP Pro, I get the following Message):

Then it basically counts down to zero and restarts the system.

I started getting this late this afternoon. I just did a re-install of Windows, didn't have anything to lose anyway. But it keeps coming back up on the FRESH INSTALL

How can I fix this?

ASAP Please

 

A question.
Do you have an antivirus running (like Norton with autoprotect enabled)?
You can try disable it and reboot.

 

Funny you should say that actually...

'cause a Norton Antivirus 2003 Pro message pops up around the same time sometimes. That was before I did a clean XP install though. I've done the install, same error message, no Norton one though.



Someone please help, I don't have enough time to Google around and find an answer.

 

..and you should check the service state by:

start->control panel->performance&manteinance->admin tools->services.
Then locate the Remote Procedure Call RPC (not the Locator) and check the startup type option:has to be Automatic.

Good luck.

 

It was stopped, but startup type is automatic, cannot start.

 

Have you tried starting in safe mode ?

I'm out of ideas

 

alright..as Chilling said, I've had the same problem today...must be a mass attack through a vulnerability. Enable the windows firewall and see if you can stay up for more than a couple minutes at a time. Good luck..so far so good for me.

 

It seems someone else has got the same problem right now

http://forums.bit-tech.net/showthread.php?s=&threadid=37964

Edit ops i was late

 

..and if the firewall resolves the issue, then get yourself a decent one (i've sygate and it )

 

Update with THIS patch if you haven't already...

 

This is a widespread problem then?

Downloing patch

argh, 4 secs




Edit: right ok, the patch is installed. Hopefully that should be the problem sorted. The service seems to be running automatically now. How come it just started all of a sudden today?

 

this is a remote rpc exploit, it seems to be being exploited a lot tonight.

First off get a firewall, then install the patch mentioned above

that should stop it, you'll find if u disconnect from the net it wont happen....

EDIT: Related links

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-026.asp

effects nt/2k/xp

 

****...so there was actually somebody at my computer tonight?

 

I started to get this problem tonight, and have spent the last hour trying to fix it.

I downloaded the patch, and so far it seems to be stopping it.

I still have the MSblast.exe running though, whats the best way to delete it.

 

Patch has been running for about an hour and a half now, it seems to have fixed the problem.

I just feel like it's just gonna be a matter of time now before I get another error message though, a bit annoying.

My net connection seems a bit dodgy at the moment, going really slow and I'm not connecting to servers and stuff, not sure if that's related though.

 

Press control/alt/delete to bring up task manager, and end the process for msblast.exe, then in the c:/windows/system32 folder, find and delete msblast.exe, in WinXP the is also a msblast file in the 'prefetch' folder. Also, msblast edits the registry, so you need to remove it, as detailed HERE.

 

I had that problem. once. Then I set my linksys router to function as a router (it can be a hub/router, and router comes with hardware firewall) I was just testing something using it as a hub. So yeah... no patch here. I'm still running a fresh XP install. absolutely no updates to windows, no service packs, no patches. no nothing.








my ass is gonna be nuked tonight I bet but seriously, I've got a decent (read: nazi) firewall and I'm care ful with what I do. for some reason im fortunate enough to never experience anything drastic. if something comes along i just use good ole system restore. i create I new restore point every other day

 

I hit the New thread button to post this same thing and then I hit the back button because I saw the subject line here and said "hey, that looks familiar!"

I originally just went to admin services, services, and the properties of the RPC services. There was an option on what to do with errors, I and told it to "take no action" whereas it previously said "tick you off and restart every few seconds"

But I noticed a lot of my php scripts not functioning properly, and my webserver was s l o w!
So I'm glad I found this, I should probably get a virus scanner, huh?

 

thats prolly the only security ive got installed on my actual pc


a good virus scanner is a must. Microsoft should make one and bundle it with windows.


on second thought. they should jsut stick to improving their OSes

 

They just bought a company that makes virus software.

If you don't visit Windows Update regularly, you deserve to get shut down remotely via exploits and infected. Microsoft released this patch in July.