nt authority system shutdown

[Guest]

i keep recieving a message that the NT AUTHORITY SYSTEM NEEDS TO SHUTDOWN,
RPC TERMINATED UNEXPECTEDLY. Any suggestions?

 

[Star Fleet Admiral Q]

Yes, you have the Blaster virus or one of it's variants. Are you running
Antivirus software and if so, have you kept the definitions up to date. If
not, then that's why you have it. As soon as this happens, open a command
window, <Start><Run><cmd><enter> and at the prompt type in "shutdown -a"
<enter>. This will stop the shutdown process long enough for you to go to
the Symantec site or Antivirus software of your choice and a) update your
virus definitions or purchase Antivirus software and b) lookup how to remove
the virus permanently from your computer.

 

[Ken Blake]

i keep recieving a message that the NT AUTHORITY SYSTEM NEEDS TO
SHUTDOWN, RPC TERMINATED UNEXPECTEDLY. Any suggestions?

You are infected with either the Blaster or Sasser worm, which you got by
running without a firewall, and by not installing the Microsoft critical
updates.



First go to Start | Run and type shutdown -a



That will stop it from shutting down. Then do Google searches on Blaster and
Sasser, figure out which you have and get removal instructions.

In the future, get all Windows critical updates and turn on your firewall.

 

[NoNoBadDog!]

i keep recieving a message that the NT AUTHORITY SYSTEM NEEDS TO SHUTDOWN,
RPC TERMINATED UNEXPECTEDLY. Any suggestions?

Since you are not running any antivirus software (or if you are, you
antivirus definitions are about 2 to 3 years out of date), your computer is
infected with one of the Blaster variants.

There is no use in trying to repair the problem until you learn some basic
computer security. Because of your poor computer security practices, your
computer is infected and is actively infecting other vulnerable computers,
as well as targeting everyone in your address book, and every contact you
make with your computer.

I would suggest turning off the computer and never turning it on again until
you have purchased a reputable Antivirus program and know how to keep it
updated. then get a book on basic computer security, and read it.

Bobby

 

[Bruce Chambers]

i keep recieving a message that the NT AUTHORITY SYSTEM NEEDS TO SHUTDOWN,
RPC TERMINATED UNEXPECTEDLY. Any suggestions?

Ah! A classic!

If you connected the PC to the Internet without having first
enabled a firewall, without having first installed an antivirus
application with current virus definition files, and before installing
the KB828471 Hotfix, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

MS04-012 Cumulative Update for Microsoft RPC-DCOM
http://support.microsoft.com/default.aspx?scid=kb;en-us;828741

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH