computer shutdown

G

Guest

when on internet message appears that computer will shut down in 60 secs and was shutdown by NT Authority System. Windows must now restart because Remote Procedure Call (RPC) service terminated unexpectedly. Sometimes this happens after an hour or two on the net or as happened today after 15 mins. I have run norton antivirus online upload and am still having this problem. Does anyone know what is happening or how i can fix it? Have only had computer for 5 days and not very computer literate, so im not sure what to do about this
 
R

Rick \Nutcase\ Rogers

Hi,

When the shutdown warning appears, click start/run and enter "shutdown -a"
to halt the process. It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone



funkey33 said:
when on internet message appears that computer will shut down in 60 secs
and was shutdown by NT Authority System. Windows must now restart because
Remote Procedure Call (RPC) service terminated unexpectedly. Sometimes this
happens after an hour or two on the net or as happened today after 15 mins.
I have run norton antivirus online upload and am still having this problem.
Does anyone know what is happening or how i can fix it? Have only had
computer for 5 days and not very computer literate, so im not sure what to
do about this
 
C

Carey Frisch [MVP]

There are thousands of nasty computer viruses/worms looking for unprotected
computers. Your computer can be infected within a few milliseconds the moment
an internet connection is established if your computer is not properly secured.

Apparently, your computer is now infected with the W32.Blaster.Worm or one of its variants.
This happened because you have not been using an internet connection firewall and have
apparently neglected to install the critical updates available at the Windows Update website.

------------------------------------------------------------------

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

------------------------------------------------------------------

Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

Special note if you use AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm infections from computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious Programs
http://support.microsoft.com/?kbid=824146


--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

--------------------------------------------------------------------------------------------------------


| when on internet message appears that computer will shut down in 60 secs and was shutdown by NT Authority
System. Windows must now restart because Remote Procedure Call (RPC) service terminated unexpectedly.
Sometimes this happens after an hour or two on the net or as happened today after 15 mins. I have run norton
antivirus online upload and am still having this problem. Does anyone know what is happening or how i can fix
it? Have only had computer for 5 days and not very computer literate, so im not sure what to do about this
 
G

Guest

I don't think you need to install the patch before you get it to avoid the issue

Either way download the Blaster Removal tool from Microsoft then download the patch

Its fast and eazy then no more random shutdowns.
 
R

Rick \Nutcase\ Rogers

Hi,

What I meant by that is that in order to avoid infection in the first place,
the patch needs to be installed.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top