Computer reboots

[Bob]

I am trying to update Mcafee, online, and or QB's tax
tables and get booted off line with message, "system will
shut down, quit and savew what your are doing", Remote
procedure call (RPC) service terminated unexpectly" What
does this mean? I have XP Home edition. (Not this
computer)

 

[Rick \Nutcase\ Rogers]

Hi Bob,

When the shutdown warning appears, click start/run and enter "shutdown -a"
to halt the process. It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[S. Sengupta]

Hi,
It appears your computer has been infected with the Blaster
virus.Perhaps You have not enabled the firewall while browsing the
internet and not patched the system with latest Microsoft WindowUpdate
hotfixes.

A tool is available to remove Blaster worm and Nachi worm infections
from computers that are running Windows 2000 or Windows XP:
http://support.microsoft.com/default.aspx?scid=833330
see also:-
Virus Alert About the Blaster Worm and Its Variants:
http://support.microsoft.com/default.aspx?kbid=826955

regards,
ssg MS-MVP
pronetworks.org