computer shutting down on it's own, gives the error

[Rodney Brown]

The system is shutting down please save all work in
progress and log off. Any unsaved data will be lost.
This shutdown was initiated by NT Authority\System. Remote
Procedure Call (RPC) teminated unexpectantly.
I have 3 computers that are doing the same exact thing.
Please help.
Thanks in advance.
Sincerely,
Rodney Brown

 

[Nicholas]

Follow the suggestions oulined in this Microsoft Knowlwdge Base article:

Windows Update Site Lists Updates That You Already Installed
http://support.microsoft.com/?kbid=319109


--
Nicholas

---------------------------------------------------------------------------------


| The system is shutting down please save all work in
| progress and log off. Any unsaved data will be lost.
| This shutdown was initiated by NT Authority\System. Remote
| Procedure Call (RPC) teminated unexpectantly.
| I have 3 computers that are doing the same exact thing.
| Please help.
| Thanks in advance.
| Sincerely,
| Rodney Brown

 

[Nicholas]

Read and follow the instructions in this article:

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980


--
Nicholas

---------------------------------------------------------------------------------


| The system is shutting down please save all work in
| progress and log off. Any unsaved data will be lost.
| This shutdown was initiated by NT Authority\System. Remote
| Procedure Call (RPC) teminated unexpectantly.
| I have 3 computers that are doing the same exact thing.
| Please help.
| Thanks in advance.
| Sincerely,
| Rodney Brown

 

[Mcploppy ©]

Rodney Brown bashed at the keyboard and said :

The system is shutting down please save all work in
progress and log off. Any unsaved data will be lost.
This shutdown was initiated by NT Authority\System. Remote
Procedure Call (RPC) teminated unexpectantly.
I have 3 computers that are doing the same exact thing.
Please help.
Thanks in advance.
Sincerely,
Rodney Brown

From BTOpenworld Support:

There is currently a virus spreading across the net which basically leaves
you open to hackers by using the RPC feature of Windows NT
based systems (NT/2000/XP).

Symptoms of the virus are:

Your computer will shut itself down and then restart in order to allow the
virus to finish propogating itself

Antivirus software will NOT detect this as it is a modified version of
useful program code!

Please all ensure that you have downloaded the critical system updates
supplied by Microsoft:

Microsoft Windows 2000 Advanced Server SP4:

Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/deta...46-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Advanced Server SP3:
Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/deta...46-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Advanced Server SP2:
Microsoft Windows 2000 Datacenter Server SP4:
Microsoft Windows 2000 Datacenter Server SP3:
Microsoft Windows 2000 Datacenter Server SP2:
Microsoft Windows 2000 Professional SP4:
Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/deta...46-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Professional SP3:
Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/deta...46-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Professional SP2:
Microsoft Windows 2000 Server SP4:
Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/deta...46-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Server SP3:
Microsoft Patch Windows2000-KB823980-x86-ENU.exe
http://microsoft.com/downloads/deta...46-F541-4C15-8C9F-220354449117&displaylang=en

Microsoft Windows 2000 Server SP2:
Microsoft Windows NT Enterprise Server 4.0 SP6a:
Microsoft Patch Q823980i.EXE
http://microsoft.com/downloads/deta...4E-217E-4FA7-BDBF-DF77A0B9303F&displaylang=en

Microsoft Windows NT Server 4.0 SP6a:
Microsoft Patch Q823980i.EXE
http://microsoft.com/downloads/deta...4E-217E-4FA7-BDBF-DF77A0B9303F&displaylang=en

Microsoft Windows NT Terminal Server 4.0 SP6a:
Microsoft Patch Q823980i.EXE
http://microsoft.com/downloads/deta...60-64FA-424C-A3C1-C9FAD2DC65CA&displaylang=en

Microsoft Windows NT Workstation 4.0 SP6a:
Microsoft Patch Q823980i.EXE
http://microsoft.com/downloads/deta...4E-217E-4FA7-BDBF-DF77A0B9303F&displaylang=en

Microsoft Windows Server 2003 Datacenter Edition :
Microsoft Windows Server 2003 Datacenter Edition 64-bit :
Microsoft Windows Server 2003 Enterprise Edition :
Microsoft Patch WindowsServer2003-KB823980-x86-ENU.exe
http://microsoft.com/downloads/deta...3A-9F4C-4061-9009-3A212458E92E&displaylang=en

Microsoft Windows Server 2003 Enterprise Edition 64-bit :
Microsoft Patch WindowsServer2003-KB823980-ia64-ENU.exe
http://microsoft.com/downloads/deta...73-C3F0-4EC1-995F-017E35692BC7&displaylang=en

Microsoft Windows Server 2003 Standard Edition :
Microsoft Patch WindowsServer2003-KB823980-x86-ENU.exe
http://microsoft.com/downloads/deta...3A-9F4C-4061-9009-3A212458E92E&displaylang=en

Microsoft Windows Server 2003 Web Edition :
Microsoft Patch WindowsServer2003-KB823980-x86-ENU.exe
http://microsoft.com/downloads/deta...3A-9F4C-4061-9009-3A212458E92E&displaylang=en

Microsoft Windows XP 64-bit Edition SP1:
Microsoft Patch WindowsXP-KB823980-ia64-ENU.exe
http://microsoft.com/downloads/deta...DF-4A85-488F-80E3-C347ADCC4DF1&displaylang=en

Microsoft Windows XP 64-bit Edition :
Microsoft Windows XP Home SP1:
Microsoft Patch WindowsXP-KB823980-x86-ENU.exe
http://microsoft.com/downloads/deta...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

Microsoft Windows XP Home :
Microsoft Windows XP Professional SP1:
Microsoft Patch WindowsXP-KB823980-x86-ENU.exe
http://microsoft.com/downloads/deta...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

Microsoft Windows XP Professional :
References
Source: Microsoft Security Bulletin MS03-026
URL:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp


--
Mcploppy ©

{ Remove both MyShoes to email me}
{ Homepage: http://tinyurl.com/bbel }
{ Local Radio: http://tinyurl.com/j1vi }
{ Download Messenger 6 http://tinyurl.com/h7co }

 

[iulian]

-----Original Message-----
The system is shutting down please save all work in
progress and log off. Any unsaved data will be lost.
This shutdown was initiated by NT Authority\System. Remote
Procedure Call (RPC) teminated unexpectantly.
I have 3 computers that are doing the same exact thing.
Please help.
Thanks in advance.
Sincerely,
Rodney Brown
.

 

[Gary Hegan]

I just fixed my aunts computer with the same message and it was caused by
The Weather Channels Desktop Weather program. If you have this program on
all three computers remove it.