RPC service

[Lee]

Hi all,

i'm having a problem with a laptop running XP Home,
aren't we all?
the OS has recently been rebuilt, authentic software and
genuine authorisation code!
when the owner of the laptop logs onto the internet, dial
up modem, it logs onto the ISP fine. it will then open
up the homepage. a apparently random amount of time (30
secs - 2/3 mins) then the following message appears:
"The system is shutting down, please save all work in
progress and log off. Any unsaved changes will be lost.
This shutdown was initiated by NT AUTHORITY/SYSTEM. Time
before shutdown 00:00:60(counts down)
Windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly."

any ideas anyone? could it be a virus? i don't think
they've had long enough on the internet to pick up a
virus!

many thanks in advance.
lee.

 

[Chuck]

Hi all,

i'm having a problem with a laptop running XP Home,
aren't we all?
the OS has recently been rebuilt, authentic software and
genuine authorisation code!
when the owner of the laptop logs onto the internet, dial
up modem, it logs onto the ISP fine. it will then open
up the homepage. a apparently random amount of time (30
secs - 2/3 mins) then the following message appears:
"The system is shutting down, please save all work in
progress and log off. Any unsaved changes will be lost.
This shutdown was initiated by NT AUTHORITY/SYSTEM. Time
before shutdown 00:00:60(counts down)
Windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly."

any ideas anyone? could it be a virus? i don't think
they've had long enough on the internet to pick up a
virus!

many thanks in advance.
lee.

Lee,

That's the Blaster worm or one of its variants. It just takes a few
seconds for infection, depending upon what network (ISP) you're
connected thru.

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp
Protect Your PC
http://www.microsoft.com/security/protect/

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Danny Slye - [MSFT}]

This is the blaster virus, go to:
http://www.microsoft.com/security/incident/blast.asp
and follow the steps to remove the virus and prevent it's return
--------------------

Hi all,

i'm having a problem with a laptop running XP Home,
aren't we all?
the OS has recently been rebuilt, authentic software and
genuine authorisation code!
when the owner of the laptop logs onto the internet, dial
up modem, it logs onto the ISP fine. it will then open
up the homepage. a apparently random amount of time (30
secs - 2/3 mins) then the following message appears:
"The system is shutting down, please save all work in
progress and log off. Any unsaved changes will be lost.
This shutdown was initiated by NT AUTHORITY/SYSTEM. Time
before shutdown 00:00:60(counts down)
Windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly."

any ideas anyone? could it be a virus? i don't think
they've had long enough on the internet to pick up a
virus!

many thanks in advance.
lee.

__
Danny Slye
Microsoft Support Professional
MCSE

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!