generic win32 application restart

[minimalistik]

This has happen to me a few times already and its annoying. What happens is that windows NT restarts my computer because the RPC procdure failed and gives me 58secs to close everything.

The thing is that i did have that patch installed for the w32.blaster.worm a few months ago and this worm does the same thing, restart you comp. But i am protected from it ever since i had the patch. But now, when i disable my notorn internet security for a few minutes, NT starts to restart the system.

I was protected by norton from the virus ever since it came out but if you were proected from the virus by your anti-virus, did you still need to dlwd the patch?

Can anyone help me stop this restart procedure?

[prstudio]

You need to at least run the Fixblast.exe file from:
http://securityresponse.symantec.com/avcenter/FixBlast.exe

Ok, just to make sure I'm following here...

You have norton internet security; when the virus came out you ran the Microsoft patch... now when you disable the norton internet security, it starts doing the RPC thing...

Just need to know because that RPC can be a pain at times.
Let me know.

The patch from Microsoft prevents you from being infected at all or again. If you were infected then ran the patch, you are still infected - you just can't get it again.

You would still need to run the removal tool. About 99.9% of the time anymore this is what causes that error.

[teet]

do as prstudio told you

search google for "fixblast.exe" (downloadable form symantec). follow the instructions on the site (probably will tell you to turn off system restore, reboot into safe mode, and then fun the fixblast.exe program).

then install all critical updates from microsoft.

i'm thinking that you originally were not affected by the virus b/c of your firewall, so of course you didn't install the patch (because there was nothing wrong), then you took down your firewall for whatever reason and the virus got in.

-teet

[Maxtr0sity]

Ok, I'm not too familiar with NT, but I'll assume it's same as 2000 basically. Anyways, I got the problem before.

1. Go into Services through the CP.
2. Go down to some services that begin with the word 'Remote'.
3. In each and every one of them, double click on them.
4. Under the Recovery tab, select 'Take No Action' for everything. Do that for every service that starts with the word 'Remote'.

Then run fixblast.exe

[alzor]

I heard there was variants of it out there that doesnt get helped by fixblast... anywho I ran fixblast on my comp, it said it didnt find anything but afterwards everything was ok.