System Shutdown Message

[Guest]

My laptop crashed this morning - after re-booting I now get the following message after only a couple of minutes each time
System Shutdown - Initiated by NT Authority/System. Windows needs to restart because RPC service has been terminated unexpectedl
Any ideas how to resolve this please ??

 

[Will Denny]

Hi

The system has been infected by the Blaster Worm. Have a look at the
following links:

www.kellys-korner-xp.com/xp_qr.htm#rpc

Courtesy of MVP Kelly.

"Virus Alert About the Blaster Worm and Its Variants"
http://support.microsoft.com/?id=826955

"What You Should Know About the Blaster Worm and Its Variants"
http://www.microsoft.com/security/incident/blast.asp

 

[Shenan Stanley]

My laptop crashed this morning - after re-booting I now get the following
message after only a couple of minutes each time.
System Shutdown - Initiated by NT Authority/System. Windows needs to
restart because RPC service has been terminated unexpectedly
Any ideas how to resolve this please ??

The system has been infected by the Blaster Worm.
Have a look at the following links:
www.kellys-korner-xp.com/xp_qr.htm#rpc
Courtesy of MVP Kelly.
"Virus Alert About the Blaster Worm and Its Variants"
http://support.microsoft.com/?id=826955
"What You Should Know About the Blaster Worm and Its Variants"
http://www.microsoft.com/security/incident/blast.asp

Is blaster worm still lurking in the wild?
I thought, Microsoft's automatic update
(without your consent) should have killed it off.
Are you seriously telling us that M$ is not up to
the job to protect the consumers which it claims
to do so all the time.

SK,

You do realize that you have to configure "Automatic Updates" and that
MSBlaster can infect an unpatched machine in seconds after connecting to an
unprotected Internet connection, right?

Patching is *still* the responsibility of the user in the end. Just like
maintenance on anything else in the real world is the responsibility of the
owner.

 

[Shenan Stanley]

My laptop crashed this morning - after re-booting I now get the following
message after only a couple of minutes each time.
System Shutdown - Initiated by NT Authority/System. Windows needs to
restart because RPC service has been terminated unexpectedly
Any ideas how to resolve this please ??

The system has been infected by the Blaster Worm.
Have a look at the following links:
www.kellys-korner-xp.com/xp_qr.htm#rpc
Courtesy of MVP Kelly.
"Virus Alert About the Blaster Worm and Its Variants"
http://support.microsoft.com/?id=826955
"What You Should Know About the Blaster Worm and Its Variants"
http://www.microsoft.com/security/incident/blast.asp

Is blaster worm still lurking in the wild?
I thought, Microsoft's automatic update
(without your consent) should have killed it off.
Are you seriously telling us that M$ is not up to
the job to protect the consumers which it claims
to do so all the time.

You have MSBlaster.
You have not patched (or you did a repair installation and did not repatch)
in a LONG time.
Your firewall is/was not on.

Get rid of Blaster first:
http://www.microsoft.com/security/incident/blast.asp

Once you get there - PRINT IT.. If the shutdown message appears, click on
START, select RUN and type in the following line:

shutdown -a

and click OK.

That will abort the shutdown and you can continue cleaning the machine.

After you have followed Microsoft's fine instructions, do these things to
really clean up the machine.. There is no telling what other parasites might
be hanging out in your computer:

Please Notice that if you use AOL, you should at least upgrade to 9.0 or
greater before doing any of the fixes. I know you can get AOL 9.0 at almost
any convenience store, gas station, super market or other retail outlet in
the world, so this should not be a problem.


Turn on that firewall...
http://www.microsoft.com/WindowsXP/home/using/howto/homenet/icf.asp
(It has been reported that it now works with AOL 9.0+)


Make sure you have all the updates (critical) installed from:
http://windowsupdate.microsoft.com/
(Scan for updates, Review and Install)


Get rid of the spy/ad/mal-ware..
(Yes - using MORE than one of these..
I recommend at least the first three. Also..
UPDATE the definitions for them before using.)

Spybot Search and Destroy
http://www.safer-networking.net/

Lavasoft AdAware
http://www.lavasoft.de

CWSShredder
http://www.spywareinfo.com/~merijn/downloads.html

Hijack This!
http://mjc1.com/mirror/hjt/

I also like "The Cleaner" and "SpywareBlaster" and "SpywareGuard".
- http://www.moosoft.com/
- http://www.javacoolsoftware.com/

The first is a PAY product, but useable for 30 days - it has found and
eliminated problems in the past the others did not. The latter two are
prevention mechanisms. I like SpywareGuard for those with enough processor
to have something running like antivirus software - and it prevents browser
hijacking quite well.

And Assortment of Others:
http://www.merijn.org/downloads.html


After you cleanup your PC somewhat of spy/ad/mal-ware, verify your antivirus
software is updated and run a full scan of your computer. If you have no
antivirus software - get one NOW! Grisoft AntiVirus:
http://www.grisoft.com/us/us_dwnl_free.php


Empty your Temporary Internet Files and shrink the size it stores to about
80 to 120MB (seems to be an optimal size for the normal user)

- Open ONE copy of Internet Explorer.
- Select TOOLS -> Internet Options.
- Under the General tab in the "Temporary Internet Files" section,
do the following:
- Click on "Delete Cookies" (click OK)
- Click on "Settings" and change the
"Amount of disk space to use:" to something between 80MB
and 120MB. (Betting it is MUCH larger right now.)
- Click OK.
- Click on "Delete Files" and select to
"Delete all offline contents" (the checkbox) and click
OK. (If you had a LOT, this could take 2-10 minutes or
more.)
- Once it is done, click OK, close Internet Explorer
- Re-open Internet Explorer.


Uninstall any software you do not use often/ever. (If you have something
installed but never use it, uninstall it.) If you go through Control
Panel -> Add/Remove Programs and see things you seldom if ever use, it is to
your advantage to remove it.


Also, if you are tired of Web Page Pop-Ups/Unders.. You could try the
Google Toolbar.
http://toolbar.google.com/


Stop loading applications at logon.. run MSCONFIG and look under the startup
tab for things you DON'T want to startup! Search the Internet with Google
to discover what things are safe to remove and what things may even be
malware infecting your computer.


Better control your email and lessen the amount of time you spend dealing
with SPAM:
SpamBayes
http://spambayes.sourceforge.net
or
Spamihilator.
http://www.spamihilator.com

 

[Sheila M]

I have Norton firewall installed and this still happened
to me. I have had problems with my PC since installing
Windows Professional 2003 on Thursday. Norton has
asked to be reinstalled twice and then after it said it
was disabled it found the W32.Blaster.Worm. Is there a
problem with Windows Professional and Norton?

 

[Shenan Stanley]

I have Norton firewall installed and this still happened
to me. I have had problems with my PC since installing
Windows Professional 2003 on Thursday. Norton has
asked to be reinstalled twice and then after it said it
was disabled it found the W32.Blaster.Worm. Is there a
problem with Windows Professional and Norton?

You installed Windows 2003 Server or Windows XP Professional?
Either way - did you connect to the Internet before installing your "Norton
Firewall"?

If so...

You have MSBlaster.
You have not patched (or you did a repair installation and did not repatch)
in a LONG time.
Your firewall is/was not on.

Get rid of Blaster first:
http://www.microsoft.com/security/incident/blast.asp

Once you get there - PRINT IT.. If the shutdown message appears, click on
START, select RUN and type in the following line:

shutdown -a

and click OK.

That will abort the shutdown and you can continue cleaning the machine.

After you have followed Microsoft's fine instructions, do these things to
really clean up the machine.. There is no telling what other parasites might
be hanging out in your computer:

Please Notice that if you use AOL, you should at least upgrade to 9.0 or
greater before doing any of the fixes. I know you can get AOL 9.0 at almost
any convenience store, gas station, super market or other retail outlet in
the world, so this should not be a problem.


Turn on that firewall...
http://www.microsoft.com/WindowsXP/home/using/howto/homenet/icf.asp
(It has been reported that it now works with AOL 9.0+)


Make sure you have all the updates (critical) installed from:
http://windowsupdate.microsoft.com/
(Scan for updates, Review and Install)


Get rid of the spy/ad/mal-ware..
(Yes - using MORE than one of these..
I recommend at least the first three. Also..
UPDATE the definitions for them before using.)

Spybot Search and Destroy
http://www.safer-networking.net/

Lavasoft AdAware
http://www.lavasoft.de

CWSShredder
http://www.spywareinfo.com/~merijn/downloads.html

Hijack This!
http://mjc1.com/mirror/hjt/

I also like "The Cleaner" and "SpywareBlaster" and "SpywareGuard".
- http://www.moosoft.com/
- http://www.javacoolsoftware.com/

The first is a PAY product, but useable for 30 days - it has found and
eliminated problems in the past the others did not. The latter two are
prevention mechanisms. I like SpywareGuard for those with enough processor
to have something running like antivirus software - and it prevents browser
hijacking quite well.

And Assortment of Others:
http://www.merijn.org/downloads.html


After you cleanup your PC somewhat of spy/ad/mal-ware, verify your antivirus
software is updated and run a full scan of your computer. If you have no
antivirus software - get one NOW! Grisoft AntiVirus:
http://www.grisoft.com/us/us_dwnl_free.php


Empty your Temporary Internet Files and shrink the size it stores to about
80 to 120MB (seems to be an optimal size for the normal user)

- Open ONE copy of Internet Explorer.
- Select TOOLS -> Internet Options.
- Under the General tab in the "Temporary Internet Files" section,
do the following:
- Click on "Delete Cookies" (click OK)
- Click on "Settings" and change the
"Amount of disk space to use:" to something between 80MB
and 120MB. (Betting it is MUCH larger right now.)
- Click OK.
- Click on "Delete Files" and select to
"Delete all offline contents" (the checkbox) and click
OK. (If you had a LOT, this could take 2-10 minutes or
more.)
- Once it is done, click OK, close Internet Explorer
- Re-open Internet Explorer.


Uninstall any software you do not use often/ever. (If you have something
installed but never use it, uninstall it.) If you go through Control
Panel -> Add/Remove Programs and see things you seldom if ever use, it is to
your advantage to remove it.


Also, if you are tired of Web Page Pop-Ups/Unders.. You could try the
Google Toolbar.
http://toolbar.google.com/


Stop loading applications at logon.. run MSCONFIG and look under the startup
tab for things you DON'T want to startup! Search the Internet with Google
to discover what things are safe to remove and what things may even be
malware infecting your computer.


Better control your email and lessen the amount of time you spend dealing
with SPAM:
SpamBayes
http://spambayes.sourceforge.net
or
Spamihilator.
http://www.spamihilator.com

 

[Sheila M]

I bought the PC with Windows XP Home already installed.
I then installed Office 2000 as the organisation I need
the PC for were all using this. Then it was decided
that we should use Office Professional 2003. I had
problems retrieving mail via Outlook 2003 as all my mail
was going to Yahoo (a BT company). I think I have now
resolved this. It occurs to me that what I should have
done was uninstalled Norton, then installed Office
Professional 2003 and then re-installed Norton. Am I
right in this and can I still do it?

 

[Bruce Chambers]

Greetings --

Yes, Blaster is still rampant in the wild, largely because all too
many people have listened to the paranoid ravings that you practice,
and failed to update their systems. Another large segment of computer
users is simply too uninformed to enable automatic updates, or don't
realize that there's any need to update. There's absolutely no such
thing as "Microsoft's Automatic updates (without your consent)." I've
no idea where you got such an absurd idea that there was, but you
should probably learn to refrain from offering any more comments until
you've acquired at least a modicum little factual knowledge.

Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[SK]

Is blaster worm still lurking in the wild?  I thought, Microsoft's automatic update (without your consent) should have killed it off.  Are you seriously telling us that M$ is not upto the job to protect the consumers which it claims to do so all the time.
 
 
 

Will Denny wrote: Hi

The system has been infected by the Blaster Worm.  Have a look at the
following links:

www.kellys-korner-xp.com/xp_qr.htm#rpc

Courtesy of MVP Kelly.

"Virus Alert About the Blaster Worm and Its Variants"
http://support.microsoft.com/?id=826955

"What You Should Know About the Blaster Worm and Its Variants"
http://www.microsoft.com/security/incident/blast.asp

--

Will Denny

MS-MVP Windows Shell/User
"Diane" <[email protected]> wrote in message
news[email protected]...

 

[wojo]

No it isn't necessary to uninstall Norton but you should disable it.
The entire problem though seems to stem from whether or not you installed
your Norton firewall BEFORE you ever connected to the internet since it only
takes being connected for seconds to get a worm, parasite, or virus.
(Especially the MSBlaster Virus)