Error - System Shutdown

[cp az]

After installation, I ran the scan and cleaned the files.
Now after the XP opens I get to my main screen and then a
System Shutdown box pops up, and gives me 60 seconds
before the system shuts down. It says "Windows must now
restart because the Remote Procedure Service terminated
unexpectedly"

What do I do?

 

[Bill Sanderson]

You're infected with a virus. If you are in the US or Canada, you can call
1-866-PCSafety for direct free help from Microsoft PSS with virus infection
or security issues.

If you are outside that geographic area you should be able to call the local
Microsoft subsidiary for equivalent free help, although the call itself may
not be toll free.

You may also be able to avail yourself of the help here:

http://www.microsoft.com/security/incident/blast.mspx

 

[Guest]

Sounds like either Blaster or Welchia worm. You can get
removal tools from Symantec here:

Blaster
http://securityresponse.symantec.com/avcenter/venc/data/w3
2.blaster.worm.removal.tool.html

Welchia
http://securityresponse.symantec.com/avcenter/venc/data/w3
2.welchia.worm.removal.tool.html

 

[HELP]

I'm having the same issue, did you have any luck ????

 

[Bill Sanderson]

You can call Microsoft PSS for free help with issues directly resulting from
Virus infections, or security patch issues:

1-866-pcsafety

in the US or Canada.

Elsewhere, call the local Microsoft subsidiary--equivalent help should be
available, although the call is not always toll free.

 

[rwfkdf]

Have you received a reply on this problem? I having the
same experience. Thanks

 

[rwfkdf]

I went to the MS security link and my computer did not
have the "msblast" exe file. I'm running McAfee virus
scan and do not have that virus. Any other suggestions?

Thanks!!!

 

[Bill Sanderson]

Have you run a full scan of the machine, with current definitions?

Do you have a firewall between your machine and the Internet?

Both Blaster and Welchia can cause this message--here's a link to Symantec's
Welchia removal tool:

http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

Its in the back of my mind that this can be caused by other issues as
well--and it sounds like you are in that category--

When the shutdown sequence starts, drop to a cmd prompt and type in
shutdown -a
and hit enter

Does that stop it?

There's so much stuff around blaster and welchia in google, that I'm having
trouble finding references to other causes.