Check http://snakefoot.fateback.com/tweak/winnt/service/rpc_exploit.html
>
>I have a client whose server is running on Windows 2003 Server. Recently, upon boot-up, it always displays the ff message:
>
>

>"Generic Host Process Win32 Service has encountered a problem and needs to close."
>
>with a Send Error Report and Don't Send buttons.
>

>
>After maybe about a few minutes, the server then restarts by itself!
>
>Is it a virus? Or is it some stupid user/wannabee messing around with the configuration?
>
>We have just cleaned the machine last week for the Sasser virus. And now this!
>
>Running it with different removal tools such FxSasser.exe (Symantec), Stinger.exe (Mcafee), vcleaner.exe (Grisoft) yielded nothing.
>