Welcome, Guest. Please login or register.

Author Topic: "Remote Procedure Call terminated" problem  (Read 5501 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline mikeymike

  • Hero Member
  • *****
  • Join Date: Nov 2002
  • Posts: 3413
  • Country: 00
    • Show only replies by mikeymike
Re: "Remote Procedure Call terminated" problem
« Reply #29 on: August 12, 2003, 01:40:28 PM »
Quote
1) It's not a virus in the traditional sense.
2) Norton or any other virus killer has no way of stopping new viruses and worms. The virus/worm need to be captured, analyzed and finally detection and removal code written for it. This is very specialized handwork and cannot be made automatic, so it takes time.


Oh no, please let's not start one of those discussions :-)

 

Offline Elektro

  • Hero Member
  • *****
  • Join Date: Feb 2002
  • Posts: 1424
    • Show only replies by Elektro
Re: "Remote Procedure Call terminated" problem
« Reply #30 on: August 12, 2003, 01:40:35 PM »
what do you mean i don
#amiga.org @ irc.synirc.net
 

Offline bhoggett

  • Hero Member
  • *****
  • Join Date: Mar 2002
  • Posts: 1431
    • Show only replies by bhoggett
    • http://www.midnightmu.com
Re: "Remote Procedure Call terminated" problem
« Reply #31 on: August 12, 2003, 01:41:33 PM »
As Piru said, this is not a traditional virus, so anti-virus software is useless against it. Even if it did recognise it, all anti-virus software can do is clear your system after infection, nothing more. It would not prevent further attacks.

This is a worm attacking a vulnerability (read bug) as described on the Microsoft site (linked earlier in the thread). Unfortunately, it's unlikely that anyone will ever remove ALL such vulnerabilities from any operating system.

Using Linux provides better protection simply because it's less of a target for attack, not because it has fewer vulnerabilities.

Professional firewalls and/or dedicated hardware routers further reduce the likelihood of a successful attack, but no system is totally secure.
Bill Hoggett
 

Offline mikeymike

  • Hero Member
  • *****
  • Join Date: Nov 2002
  • Posts: 3413
  • Country: 00
    • Show only replies by mikeymike
Re: "Remote Procedure Call terminated" problem
« Reply #32 on: August 12, 2003, 01:49:02 PM »
Quote
One upto-date hardware firewall or a linux/bsd box routing all traffic should be enough to stop 99% of the baddies.


Actually no, well-educated computer users should be enough to stop 99% of the baddies.
 

Offline Kees

  • Hero Member
  • *****
  • Join Date: Feb 2002
  • Posts: 1004
    • Show only replies by Kees
    • http://www.amiga.org
Re: "Remote Procedure Call terminated" problem
« Reply #33 on: August 12, 2003, 02:01:46 PM »
I have no idea how it got to me .. but it did.

I installed the patch from the ms site and everything seems to be fine now.
Kees Witteveen
Amiga.org

** Cool Signature **
 

Offline jd997uk

  • Hero Member
  • *****
  • Join Date: Mar 2002
  • Posts: 595
    • Show only replies by jd997uk
Re: "Remote Procedure Call terminated" problem
« Reply #34 on: August 12, 2003, 02:05:55 PM »
There's a tool here to check if your port is open for abuse.
AVG has been updated to include checking for the 'Lovsan' that exploits the flaw.

-john
Don\\\'t panic - bite the towel.
 

Offline Elektro

  • Hero Member
  • *****
  • Join Date: Feb 2002
  • Posts: 1424
    • Show only replies by Elektro
Re: "Remote Procedure Call terminated" problem
« Reply #35 on: August 12, 2003, 02:25:21 PM »
i never leave my ports opened.









ahem...
#amiga.org @ irc.synirc.net
 

Offline mikeymike

  • Hero Member
  • *****
  • Join Date: Nov 2002
  • Posts: 3413
  • Country: 00
    • Show only replies by mikeymike
Re: "Remote Procedure Call terminated" problem
« Reply #36 on: August 12, 2003, 02:34:39 PM »
Quote

i never leave my ports opened.


Web browsing must be tedious :-)
 

Offline jd997uk

  • Hero Member
  • *****
  • Join Date: Mar 2002
  • Posts: 595
    • Show only replies by jd997uk
Re: "Remote Procedure Call terminated" problem
« Reply #37 on: August 12, 2003, 03:55:16 PM »
Quote

mikeymike wrote:
Quote

i never leave my ports opened.


Web browsing must be tedious :-)

Either that, or he's a French farmer ;-)

-john
Don\\\'t panic - bite the towel.
 

Offline Varthall

  • Hero Member
  • *****
  • Join Date: Mar 2002
  • Posts: 633
    • Show only replies by Varthall
Re: "Remote Procedure Call terminated" problem
« Reply #38 on: August 12, 2003, 03:57:36 PM »
Every time I read threads like this I have a feeling of
peace and freedom. At home I surf the web with my
a1200 and a PC with Beos, so no viruses, dialers,
popups, attacks and no need for firewalls... just the
nicer side of the web, aahhh  :-P

Varthall
AmigaOne XE - AmigaOS 4.1 - Freescale 7457 1GHz - 1GB ram
MPlayer for OS4: https://sourceforge.net/projects/mplayer-amigaos/
 

Offline Doobrey

  • Hero Member
  • *****
  • Join Date: Oct 2002
  • Posts: 1876
    • Show only replies by Doobrey
    • http://www.doobreynet.co.uk
Re: "Remote Procedure Call terminated" problem
« Reply #39 on: August 12, 2003, 04:21:58 PM »
Gawd, I`ve only just got back from sorting out a friends system that got infected with Bugbear.
 The silly moo had a firewall and anitvirus installed, but she hadn`t updated them since they were installed last November  :-o

 I`ve just checked my firewall logs, and in the last 12 hrs, 75% of attempted connections are for the RPC port 135...Times like this makes me glad that I refuse to upgrade from Win98... ;-)

And Microsoft want us to believe in their "Trustworthy Computing Initiative"...
 However many $$ they spent on those couple of months of bugfixing and security checking last year, it wasn`t enough..
On schedule, and suing
 

Offline Elektro

  • Hero Member
  • *****
  • Join Date: Feb 2002
  • Posts: 1424
    • Show only replies by Elektro
Re: "Remote Procedure Call terminated" problem
« Reply #40 on: August 12, 2003, 05:03:24 PM »
merde!  :-P
#amiga.org @ irc.synirc.net
 

Offline Floid

  • Hero Member
  • *****
  • Join Date: Feb 2003
  • Posts: 918
    • Show only replies by Floid
Re: "Remote Procedure Call terminated" problem
« Reply #41 on: August 12, 2003, 05:45:11 PM »
Quote

Elektro wrote:
i didnt have any problems... this is all linux propaganda...
Linux propaganda?  Hmmph!

 
 
 :-D
 

Offline Blomberg

  • Hero Member
  • *****
  • Join Date: Sep 2002
  • Posts: 796
    • Show only replies by Blomberg
Re: "Remote Procedure Call terminated" problem
« Reply #42 on: August 12, 2003, 06:05:01 PM »
Quote

Kees wrote:
It got to me too ... grrrr

Hmm, "Senior Webmaster gets victimised by mere trojan"  :-o

Tsk tsk tsk ...


 :-D

Offline Calen

  • Hero Member
  • *****
  • Join Date: Apr 2002
  • Posts: 1246
    • Show only replies by Calen
Re: "Remote Procedure Call terminated" problem
« Reply #43 on: August 12, 2003, 06:09:00 PM »
Quote
I`ve just checked my firewall logs, and in the last 12 hrs, 75% of attempted connections are for the RPC port 135...Times like this makes me glad that I refuse to upgrade from Win98...

Seems to be a very common thing of late, you can directly test if your at risk with this by clicking
here  (port 135 on your comp will be probed)

This link will instantly and easily test anyone's Internet-connected PC. "Open" is BAD, "Closed" or "Stealth" is safe.
 
Lots of other security tests can be performed at the main Shields Up page which we all had fun time? on IRC doing last night :-)

Welcome to probe central ;-)
 

Offline Blomberg

  • Hero Member
  • *****
  • Join Date: Sep 2002
  • Posts: 796
    • Show only replies by Blomberg
Re: "Remote Procedure Call terminated" problem
« Reply #44 from previous page: August 12, 2003, 06:13:48 PM »
Quote

Calen wrote:
Seems to be a very common thing of late, you can directly test if you at risk with this by clicking
here  (port 135 on your comp will be probed)

This link will instantly and easily test anyone's Internet-connected PC. "Open" is BAD, "Closed" or "Stealth" is safe.
 
Lots of other security tests can be performed at the main Shields Up page which we all had fun time? on IRC doing last night :-)
Seems to me that test isn't very reliable.
I probed my ports several times without changing any firewall settings, and still I got different results on some ports (some times closed, some times stealthed), but at least they didn't appear to be open  :-)