Crashing While on the internet

[Nick McClure]

I just put together a new computer and moved my old one
to the other end of my room. Here are the specs on the
new system. Intel P4 2.6GHZ, Corsair Dual Channel 400MHz
memory(2x512MB),
Asus P4C800 E Deluxe Motherboard, Sapphire Radeon 9600 XT
128MB Video Card, Onboard Soundm, and a Logitech Wireless
Mouse. I run XP on both Computers. The old computer has
never had a problem that this new one does.

My old one also had Xp and never had this problem. The
problem also persists if I format and reinstall
everything.

It is something to do with the internet. Whenever I am
connected, at no specific time, an error will eventually
come up. Usually when a page is open or I am downloading.
It happens every time I try to update to SP1 from windows
update site. The error gives my 1 minute and then forces
shutdown and restart. Heres part of what the error says.

This shutdown was initiated by NT AUTHORITY/SYSTEM
Windows must now restart because the remote procedure call
(RPC) service terminated unexpectedly.

I dont know if this info will help, but I have used the
xp cd to network 2 computers before with xp for internet
sharing, and never had a problem. We could play games and
both surf the internet easily. When I set it up now, the
host(this) computer can surf normally, but the other
computer will say website found but never get there. We
can play games fine though. And the client computer can
play a game on the net through the shared connection, so
I dont know why the internet is giving us trouble. I dont
have a hub, but its just two computers, and It worked
fine before without a hub.

But this crash also seems to like to infect my old client
computer now too. A few times my computer would crash
then it would get the same message within a short time,
or vise versa.

One more piece of info that might be handy. Before I use
my included Asus Motherboard disc to install and update
the onboard sound and network and stuff, there is already
an adapted present in the network section under the
hardware device manager. It is just called 1394 Net
Adapter. It is always shown as being connected. But I
cant connect to the internet with it. If i unplug the
cable it still says connected, so im not sure what it is,
and if i uninstall it, it just comes back. Once i install
the network adapted with the cd there is a separate
network adapter called Intel Pro/1000 CT Network
connection and I can connect with that one, and when
cable is unplugged it knows so. I was thinking this
strange extra adapter might have something to do with it.
And its not the other network adapted I had installed at
one time, because this was here before i installed the
dlink adapter to network the computers.

Any suggestions? Actually The computer came up with that
crash as I was sitting here typing and I had to do it all
over again :\

Thanks

 

[Ionizer]

It is something to do with the internet. Whenever I am
connected, at no specific time, an error will eventually
come up. Usually when a page is open or I am downloading.
It happens every time I try to update to SP1 from windows
update site. The error gives my 1 minute and then forces
shutdown and restart. Heres part of what the error says.

This shutdown was initiated by NT AUTHORITY/SYSTEM
Windows must now restart because the remote procedure call
(RPC) service terminated unexpectedly.

Blaster:

http://www.microsoft.com/security/incident/blast.asp

http://www.mvps.org/marksxp/WindowsXP/rpc.php

Symantec Removal Tool:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

HTH,
Ian.

 

[Rick \Nutcase\ Rogers]

Hi Nick,

When the shutdown warning appears, click start/run and enter "shutdown -a"
to halt the process. It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone