XP error message

[Fay]

Just did a total system recovery this past weekend - and it solved my
previous problem ... now I have a new one. Running Compaq Presario ... AMD
Athlon 2G ... 128 RAM. WinXP ... when online getting the following error
message box ...

SYSTEM SHUTDOWN Windows must restart because Remote Procedure Call RPC was
terminated unepectedly. Please save any work in progress and log off. Any
unsaved changes will be lost. {COUNTDOWN TIMER} This shutdown was
initiated by NT Authority System.

At the end of the countdown time the computer shuts off and reboots.

Any suggestions what I can do to stop this? It is happening frequently.

Thank You in advance!

Fay

 

[Lance Joiner]

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

 

[anon]

Sounds like you have the Blaster Virus - don't have the
links here but go to the symantec site for some
assistance. Also you'll need to download the patch.
To abort shutdown

Start, Run - then type
shutdown -a

Also in the Taskmanager, look for Mblaster.exe and end
process.

 

[Fay]

Thanks for the help ! I had my system scanned with Trend Micro Housecall and
it detected and cleaned a "MALWorm MBlast" or something like that. I also
downloaded and installed all the recommended updates and service packs from
the Microsoft Windows Update site. So far .. so good.

I also uninstalled "Weather Bug" and a couple of other programs that were
trying to run in the background even though I never authorized their
installation .. they just showed up but are gone now!

Thanks again!
Fay