Remote Procedure call service shut down

[Guest]

When logged on the internet my PC shuts down with an error message " shut down authorised by NT authority\system
Windows must restart because the remote procedure call(RPC) service terminated unexpectedly"

 

[roger]

Hi,

When logged on the internet my PC shuts down with an error message " shut down authorised by NT authority\system.
Windows must restart because the remote procedure call(RPC) service terminated unexpectedly"

You have a worm, the information below will help:

Blaster Worm FAQ:
http://www.microsoft.com/security/incident/blast_faq.asp

833330 A tool is available to remove Blaster worm and Nachi worm
infections
http://support.microsoft.com/?id=833330

Blaster Worm Security Bulletin:
http://www.microsoft.com/security/incident/blast.asp

826955 Virus Alert About the Blaster Worm and Its Variants
http://support.microsoft.com/?id=826955

826234 Virus Alert About the Nachi Worm
http://support.microsoft.com/?id=826234

MORE ON SECURITY:

Three steps you can take to improve your computer's security:
http://www.microsoft.com/security/protect/

321050 Description of a Personal Firewall
http://support.microsoft.com/?id=321050


Good luck, hope this helps.

 

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
enabled a firewall, without having first installed an antivirus
application with current virus definition files, and before installing
the KB824146 Hotfix, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Melissa]

samburu wrote:


When logged on the internet my PC shuts down with an error message " shut down authorised by NT authority\system. Windows must restart because the remote procedure call(RPC) service terminated unexpectedly"


After you've followed instructions to remove Blaster:

You should download and install ALL MS Critical Updates and Service Packs.  Check back on a regular basis to see what's new.

Then, to keep your computer safe, you need the following:

Get yourselft a good Anti-Virus program, keep it updated, and run it frequently.

A good firewall like Zone Alarm or the built in XP firewall. 
ZoneAlarm is available free at:
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp

Ad-Aware 6.0 - for removing spyware
http://www.lavasoftusa.com/
   
Spybot Search & Destroy - for removing spyware
http://www.safer-networking.org/
  
 CWShredder - gets rid of page hijackers
http://www.majorgeeks.com/download4086.html

 Google Toolbar  - for blocking popups
   
 http://toolbar.google.com/  

Before running these, do the following:

Delete your temporary internet files and internet history using Internet Options from the IE Tools menu.