Computer shuts down when actively on the internet

[MJ]

Error message with a 1 minute timer counting down that
states:

This system is shutting down. Please save all work in
progress and logoff. Any unsaved changes will be lost.
This shutdown was initiated by NT Authority\System.
Windows must now restart because the remote procedure
call (RPC) service terminated unexpectantly.

What can be done to fix this error message on a home
computer that has recently had a clean install of windows
xp(Got same message when clean installed home version
then formatted c: drive again and clean installed
professional version - own both versions. Shortly after
connecting to the internet and actively going from ecreen
to screen or reading emails or not active on the
internet - it doesn't matter. Currently, the Compaq
celeron computer has Windows XP Professional activated
and registered - but no SP1 pack because the computer
shuts down near the beginning of the download.) HELP.

 

[Gary Tsang]

Hi,

It appears your computer has been infected with the Blaster virus. For more
information and how to fix this please see follow this link:

http://www.microsoft.com/security/incident/blast.asp
http://www.microsoft.com/security/protect/

Plus: http://support.microsoft.com/?kbid=826955

More information about this particular worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Removal Information can be found here
http://www.kellys-korner-xp.com/xp_qr.htm#rpc


--
Gary Tsang
Microsoft MVP - Windows XP Shell/User
http://www.microsoft.com/mvp
Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

 

[MJ]

Thanks for the reply. I just was curious if there are any
viruses on the computer just after reformatting the hard
drive and not reloading any files at all. Only thing on
the hard drive that I know of was Windows XP software and
nothing else. Went only to the msn home page website just
after clean install, didn't download anything anywhere
and still got the error message. Will look into the
blaster virus fix link though.

 

[Rod Potter]

MJ: It only takes "seconds" on the net to become infected, especially if no
firewall or AV

 

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Removal Tool for Blaster/Nachi worm infections from computers running
Win2K or WinXP
http://support.microsoft.com/?kbid=833330

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH