RPC Problem caused File Protection problem

ok for several days i recieved an RPC message from
windows and shut down and rebooted as i was told to do. i
did not think anything of this as i was using resouce
hungry software at the time.

last night after i rebooted i was promted with a message
saying that Windows File protection needed the Win XP CD
to replace some system files. But windows does not access
the CD to remove anything from it. I have tried rebooting
with the CD in the drive and also placing the disc in the
drive when the promtp aprears.

I downloaded all approprate windows updates last night
and still the message apears.

I am running Norton 24/7 and also the inbuilt Firewall

no new software has been installed.

Does anyone know what could be causeing this message to
apear?


Regards

David Evans

>-----Original Message-----
>ok for several days i recieved an RPC message from
>windows and shut down and rebooted as i was told to do.

i

>did not think anything of this as i was using resouce
>hungry software at the time.
>
>last night after i rebooted i was promted with a message
>saying that Windows File protection needed the Win XP CD
>to replace some system files. But windows does not

access

>the CD to remove anything from it. I have tried

rebooting

>with the CD in the drive and also placing the disc in

the

>drive when the promtp aprears.
>
>I downloaded all approprate windows updates last night
>and still the message apears.
>
>I am running Norton 24/7 and also the inbuilt Firewall
>
>no new software has been installed.
>
>Does anyone know what could be causeing this message to
>apear?
>
>
>Regards
>
>David Evans
>.
>

From the FAQs:

My computer is giving RPC Remote Procedure Call messages, or there is a TFTP
message on my computer, or my computer keeps locking up, or rebooting, or
telling me that it will reboot in 1 minute.
http://www.google.com/groups?selm=OT...TNGP10.phx.gbl

BTW, if you're hacked by this, just installing the MS03-026 patch leaves
your computer still hacked and still remotely controllable. You also want
to do this:

http://securityadmin.info/faq.htm#hacked

Also, note that the use of a windows root kit named "stealther" or
"winshell" in one of these exploits can make it so that neither you nor your
antivirus can see the infected files on your computer that allow hackers to
remotely control your computer. If this is the case, some of the ways you
can tell if you might have a root kit installed include:

- Look for unusual items when you run NETSTAT -A and FPORT [the latter is
free from www.foundstone.com/knowledge]
- Look for unusual outbound items in your firewall logs [such as TCP 6667,
TCP 8719, etc.]. If you're not already, use a firewall such as
www.sygate.com or www.kerio.com [both are free]
- Connect to the computer through the network from another Windows computer
and scan for viruses that way
- Move the hard drive as a slave to another computer that is known to be
virus free, boot to the other version of Windows and scan for viruses that
way





"David Evans" <thecolakid@ntlworld.com> wrote in message
news:046401c3600a$fa29f8e0$a001280a@phx.gbl...

> ok for several days i recieved an RPC message from
> windows and shut down and rebooted as i was told to do. i
> did not think anything of this as i was using resouce
> hungry software at the time.
>
> last night after i rebooted i was promted with a message
> saying that Windows File protection needed the Win XP CD
> to replace some system files. But windows does not access
> the CD to remove anything from it. I have tried rebooting
> with the CD in the drive and also placing the disc in the
> drive when the promtp aprears.
>
> I downloaded all approprate windows updates last night
> and still the message apears.
>
> I am running Norton 24/7 and also the inbuilt Firewall
>
> no new software has been installed.
>
> Does anyone know what could be causeing this message to
> apear?
>
>
> Regards
>
> David Evans

Wendy's link shortened http://tinyurl.com/h5l9
"David Evans" <thecolakid@ntlworld.com> wrote in message
news:046401c3600a$fa29f8e0$a001280a@phx.gbl...

> ok for several days i recieved an RPC message from
> windows and shut down and rebooted as i was told to do. i
> did not think anything of this as i was using resouce
> hungry software at the time.
>
> last night after i rebooted i was promted with a message
> saying that Windows File protection needed the Win XP CD
> to replace some system files. But windows does not access
> the CD to remove anything from it. I have tried rebooting
> with the CD in the drive and also placing the disc in the
> drive when the promtp aprears.
>
> I downloaded all approprate windows updates last night
> and still the message apears.
>
> I am running Norton 24/7 and also the inbuilt Firewall
>
> no new software has been installed.
>
> Does anyone know what could be causeing this message to
> apear?
>
>
> Regards
>
> David Evans

http://microsoft.com/downloads/detai...displaylang=en
IS THE LINK OF THE PATCH TO DOWNLOAD THAT WILL FIX THIS. IT'S A 1.2
MB PATCH SO MAY TAKE A FEW TIMES TO DOWNLOAD. EITHER SAVE TO DISK
FROM ANOTHER COMPUTER OR SAVE IT TO YOUR DESKTOP. YOU CAN ALSO OPEN
THE FILE AND IT WILL SELF-INSTALL (WHICH IS WHAT I DID AND IT WORKED)
BIO