TechSpot

RPC Failiure Not Blaster or Sasser or Variant

By Desthro
Jul 5, 2005
  1. I have been recieving the NT System Authority Shutdown error
    because of an RPC Failiure. First I thought it was Blaster, but I
    was running SP2 and always had a firewall going, (I use NVIDIA
    firewall.) Then I did some searching and found out about Sasser
    and how it could do the same thing. I downloaded, Stinger, AVG
    and used the free virus detect at symantec.com and
    antivirus.com as well as Windows Malicious Software Removal
    Tool (god, did they have to make that huge name for it?) They
    all were running current virus definitions and they found nothing.
    Nada. The crash primarily occurs when I start a new process
    that is an internet application. AOL, IE, Firefox, etc. So I am
    thinking it is some sort of virus. I checked the firewall log this
    morning, and it has been blocking traffic from 192.168.0.1:1900
    UDP (my D-Link router address) to 239.255.255.255:1900 UDP
    (the upper end of the open UDP range) There are some 100000
    instances of port blocking at that address, and I don't know if
    that is the problem or not, or if it is just routine blocking. What
    else could cause an RPC Failiure besides those two viruses and
    the multitudes of variants? I appreciate your input. There is
    another thread here in this forum about this,
    http://www.techspot.com/vb/archive/index/t-8147.html
    but it degenerated into a talk about blaster and sasser. Anyway, Help!
     
  2. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    Clich Start/Run and type in services.msc and hit OK
    check if your RPC services are enabled and running. If not, doubleclick it, click Start and set to 'Automatic'. Also check the dependencies, another service might be off as well.
     
  3. Mictlantecuhtli

    Mictlantecuhtli TS Evangelist Posts: 4,345   +11

    Could be just Windows' own firewall crashing, or its plugin service, "Application Layer Gateway Service".

    Contrary to what people here say, I've never had problems accessing the Internet with it disabled.

    Port 1900 is Messenger, turn it off. Disable it. It's just a security risk these days. If you need to send / receive instant messages, use MSN / ICQ / AIM / whatever instead.

    You could also set RPC service so that it wouldn't restart your computer right away, just change the settings in its properties window, Recovery tab (in Services).
     
  4. Desthro

    Desthro TS Rookie Topic Starter

    Awesome

    Thanks, I guess it's nothing to worry about, just a nuisance... I have the messenger service disabled, should it still be trying to go when the service isn't running? Sounds kind of odd. But, other than that, I guess I have to live it it dying once in a while lol.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...