NT Authority System error msg

[Minister Kyle]

I have purchased a used computer and am attempting to
register XP. Once the computer turns on, everything
appears to work, however, in approx 5 min. a message
comes up with NT Authority System; Remote procedure
service terminated unexpectedly" this happens everytime
I turn the computer, it continues to re-boot itself!
Even my other computer that I purchased new comes up with
the serial number that Microsoft says this was purchased
by another! Any help would be greatly appreciated! May
God bless you all.

 

[Chris Holden]

I have purchased a used computer and am attempting to
register XP. Once the computer turns on, everything
appears to work, however, in approx 5 min. a message
comes up with NT Authority System; Remote procedure
service terminated unexpectedly" this happens everytime
I turn the computer, it continues to re-boot itself!
Even my other computer that I purchased new comes up with
the serial number that Microsoft says this was purchased
by another! Any help would be greatly appreciated! May
God bless you all.

You most likely have the blaster worm.
When the shutdown countdown starts go to: Start> run> type 'shutdown -a'
without the quotes. Hit okay. Do it again should the countdown start again
during the process.
Then go Start> contol panel> network connections> select your internet
connection and right click it. Select properties. Click the advanced tab and
tick the 'protect this...' box. Hit okay until the boxes disappear.
Now go to
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
and read the page. Download the fixblast.exe (link about half way down that
page). Run it.
When your machine is clean, go to windowsupdate.com and download all the
recommended fixes.
Chris

 

[Yves Leclerc]

Your first computer has been hit by the MS Blaster worm. Download the
removal tool from Symantec's web site.

Your second computer: Did you get an original XP CD with the correct
license of authenticity?? If not, then you have a pirated installed version
of XP.

 

[Marc Reynolds [MSFT]]

826955 Virus Alert About the Blaster Worm and Its Variants
http://support.microsoft.com/?id=826955

--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

log on to support.dell.com/us/en/kb/document.asp?dn=1093290 you will get step-by-step directions to solve your problem

 

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH