There is a new virus which is attacking machines in Sacramento It makes your computer reboot constantly And Microsoft has a free patch which will stop it http://www.microsoft.com/technet/security/bulletin/MS03-026.asp Paul Kirkum has it and called a local repair shop who said he has a machine in the shop which he is working on which also has it we just downloaded the patch and I ran it on my machine ! I hope you are having a fine day ! Seeking Jesus' will in my life ! I am Jim Rader jim@rader.org Visit my web at www.rader.org I hope to hear from you again soon! Details below A buffer overrun on the RPC (Remote Procedure Call) interfase allows the execution of arbitrary code. The Remote Procedure Call allows the interchange of data between equipment and is present by default on the TCP protocol, port 135, on Windows NT 4.0, Windows 2000 and Windows XP. It's a vulnerability on the module of the RPC that interchanges messages over TCP/IP; if a message is not created correctly (or maliciously created), it could permit that an attacker executes any code with local privileges. To exploit this vulnerability, the attacker just has to establish a connection TCP/IP to the remote RPC "Endpoint Mapper" and send the malformed message, that produces a buffer overrun on memory. It could execute programs, read and delete data, or create new user accounts with all the privileges. You must download inmediately the patch MS03-026, from one of the following addresses. http://www.microsoft.com/technet/security/bulletin/MS03-026.asp http://www.microsoft.com/security/security_bulletins/MS03-026.asp One possible symptom of an attack on Windows XP is the message: "Windows must now restart because the remote procedure call (RPC) service terminated unexpectedly". The system restarts itself on 60 seconds. It appears that in the last week the attacks are intensifying all over the internet. Eng. Daniel Vázquez Aréchiga my computer reboots itself. in the system event viewer, i get this message often: Event Type: Error Event Source: <http://itxt.vibrantmedia.com/al.asp?ipid=7&cc=us&di=31865&ts=7626155&redir= > Service Control Manager Event Category: None Event ID: 7031 Date: 8.6.2003 Time: 5:43:10 PM User: N/A Computer: FASTERWONG Description: The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine. I hope you are having a fine day ! Seeking Jesus' will in my life ! I am Jim Rader jim@rader.org Visit my web at www.rader.org I hope to hear from you again soon!