NT Authority/System

[Kelly]

To stop the reboots: Go to Start/Run and type in: services.msc. Scroll down
to Remote Procedure Call (RPC)/Recovery/First Failure/Restart the Service.

Close Windows Explorer, run the edit on line 257 which includes the prompt
for the patch once your system has been cleaned.

This script removes all variants of the W32.Blaster.Worm (original, B, C, D,
E and F) and will inform you whether or not the patch is already installed.
http://www.kellys-korner-xp.com/xp_tweaks.htm. Direct download:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs

More information here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

MS Blaster Tool: http://tinyurl.com/3h8kw

 

[Kelly]

That is CDO for you? Dunno......

Why is my computer shutting down with the message NT Authority/System;
This computer needs to restart due to RPC ended umexspectantly?

And on top of that.
Why would you post this question without reading the rest of the thread
your posting to?
All the information I just sent is also in this thread a few other times.

Please Read the posts before asking the questions.

--
kwoyach[SPAM]@yahoo[SPAM].com
TO Email: Remove [SPAM]
If I can help you I will.
If you can help me thanks.

--

**Useful Links**
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp

 

[Kelly]

Once you open a post (like I am doing to yours), go to
File/Properties/Details and it will tell me that you are posting via:
X-Newsreader: Microsoft Outlook Express 6.00.2900.2096

CDO, posters often, repeat, repeat and repeat their posts and claim they
can't find the answers or their posts, etc........

Better explained by David:

It's how MS web servers send mail. It's built in to XP Pro but not very
useful for an end user. If you press F3 while previewing (repeat
previewing not viewing) a message you'll see the headers include what
email/newsreader made it. If it comes from a MS web server or an
automated system on a MS server it will say CDO. Collabrative Data
Objects.

That is CDO for you? Dunno......

CDO?

Why is my computer shutting down with the message NT Authority/System;
This computer needs to restart due to RPC ended umexspectantly?

And on top of that.
Why would you post this question without reading the rest of the thread
your posting to?
All the information I just sent is also in this thread a few other
times.

Please Read the posts before asking the questions.

--
kwoyach[SPAM]@yahoo[SPAM].com
TO Email: Remove [SPAM]
If I can help you I will.
If you can help me thanks.

--

**Useful Links**
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp

 

[Kelly]

Most welcome and know, that MANY folks here refuse to reply to CDO
posts......for the same reasons. I random check unless the same posts are
within minutes.

Once you open a post (like I am doing to yours), go to
File/Properties/Details and it will tell me that you are posting via:
X-Newsreader: Microsoft Outlook Express 6.00.2900.2096

CDO, posters often, repeat, repeat and repeat their posts and claim they
can't find the answers or their posts, etc........

Better explained by David:

It's how MS web servers send mail. It's built in to XP Pro but not very
useful for an end user. If you press F3 while previewing (repeat
previewing not viewing) a message you'll see the headers include what
email/newsreader made it. If it comes from a MS web server or an
automated system on a MS server it will say CDO. Collabrative Data
Objects.

That is CDO for you? Dunno......


CDO?





Why is my computer shutting down with the message NT
Authority/System; This computer needs to restart due to RPC ended
umexspectantly?

And on top of that.
Why would you post this question without reading the rest of the
thread your posting to?
All the information I just sent is also in this thread a few other
times.

Please Read the posts before asking the questions.

--
kwoyach[SPAM]@yahoo[SPAM].com
TO Email: Remove [SPAM]
If I can help you I will.
If you can help me thanks.

--

**Useful Links**
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp

ahhhh, learning is a good thing.
I like to learn.
Learning=knowledge=power
lol

Thanks for the explanation.

 

[Guest]

Why is my computer shutting down with the message NT Authority/System; This computer needs to restart due to RPC ended umexspectantly?

 

[wojo]

Why is my computer shutting down with the message NT Authority/System;
This computer needs to restart due to RPC ended umexspectantly?

You have the Blaster worm.

1st to stop the RPC error so it doesn't interupt you while your making
repairs:
Start | Run | services.msc /s
Scroll down to "Remote Proceedure Call (RPC)" NOT (RPC) Locator
Right click and select properties
Under the "Recovery" Tab change all failures from "Restart the Computer" to
"Restart the Service"
This will keep the RPC from coming up.

Disable msblast.exe in task manager.
Ctrl+Alt+Del | Processes | Right click msblast.exe and click "End Process"

Download the Blaster Security Patch at:
http://www.microsoft.com/security/incident/blast.asp

Download AdAware & Spybot S & D:
AdAware: www.lavasoftusa.com/software/adaware/

Spybot S & D: www.safer-networking.org/

Disconnect from the internet

Run AdAware & Spybot
Run the Security Patch you downloaed earlier.

Make sure you have a firewall and AV software enabled and updated.
As long as you downloded and ran the patch above Blaster shouldn't come back
but there are plenty of others that can find your computer in minutes.

Change the RPC back to "Restart the Computer" the same as you did above.

Reconnect to the Internet and download the rest of the Microsoft Update
Security Patches.


--
kwoyach[SPAM]@yahoo[SPAM].com
TO Email: Remove [SPAM]
If I can help you I will.
If you can help me thanks.

--

**Useful Links**
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp

 

[wojo]

Why is my computer shutting down with the message NT Authority/System;
This computer needs to restart due to RPC ended umexspectantly?

And on top of that.
Why would you post this question without reading the rest of the thread your
posting to?
All the information I just sent is also in this thread a few other times.

Please Read the posts before asking the questions.

--
kwoyach[SPAM]@yahoo[SPAM].com
TO Email: Remove [SPAM]
If I can help you I will.
If you can help me thanks.

--

**Useful Links**
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp

 

[wojo]

That is CDO for you? Dunno......

CDO?

Why is my computer shutting down with the message NT Authority/System;
This computer needs to restart due to RPC ended umexspectantly?

And on top of that.
Why would you post this question without reading the rest of the thread
your posting to?
All the information I just sent is also in this thread a few other times.

Please Read the posts before asking the questions.

--
kwoyach[SPAM]@yahoo[SPAM].com
TO Email: Remove [SPAM]
If I can help you I will.
If you can help me thanks.

--

**Useful Links**
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp

 

[wojo]

Once you open a post (like I am doing to yours), go to
File/Properties/Details and it will tell me that you are posting via:
X-Newsreader: Microsoft Outlook Express 6.00.2900.2096

CDO, posters often, repeat, repeat and repeat their posts and claim they
can't find the answers or their posts, etc........

Better explained by David:

It's how MS web servers send mail. It's built in to XP Pro but not very
useful for an end user. If you press F3 while previewing (repeat
previewing not viewing) a message you'll see the headers include what
email/newsreader made it. If it comes from a MS web server or an
automated system on a MS server it will say CDO. Collabrative Data
Objects.

That is CDO for you? Dunno......

CDO?





Why is my computer shutting down with the message NT Authority/System;
This computer needs to restart due to RPC ended umexspectantly?

And on top of that.
Why would you post this question without reading the rest of the thread
your posting to?
All the information I just sent is also in this thread a few other
times.

Please Read the posts before asking the questions.

--
kwoyach[SPAM]@yahoo[SPAM].com
TO Email: Remove [SPAM]
If I can help you I will.
If you can help me thanks.

--

**Useful Links**
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp

ahhhh, learning is a good thing.
I like to learn.
Learning=knowledge=power
lol

Thanks for the explanation.

 

[wojo]

As will I from here on out.
Notice though that I replied with a fix before asking why they posted to
begin with

Most welcome and know, that MANY folks here refuse to reply to CDO
posts......for the same reasons. I random check unless the same posts are
within minutes.

Once you open a post (like I am doing to yours), go to
File/Properties/Details and it will tell me that you are posting via:
X-Newsreader: Microsoft Outlook Express 6.00.2900.2096

CDO, posters often, repeat, repeat and repeat their posts and claim they
can't find the answers or their posts, etc........

Better explained by David:

It's how MS web servers send mail. It's built in to XP Pro but not very
useful for an end user. If you press F3 while previewing (repeat
previewing not viewing) a message you'll see the headers include what
email/newsreader made it. If it comes from a MS web server or an
automated system on a MS server it will say CDO. Collabrative Data
Objects.





That is CDO for you? Dunno......


CDO?





Why is my computer shutting down with the message NT
Authority/System; This computer needs to restart due to RPC ended
umexspectantly?

And on top of that.
Why would you post this question without reading the rest of the
thread your posting to?
All the information I just sent is also in this thread a few other
times.

Please Read the posts before asking the questions.

--
kwoyach[SPAM]@yahoo[SPAM].com
TO Email: Remove [SPAM]
If I can help you I will.
If you can help me thanks.

--

**Useful Links**
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp

ahhhh, learning is a good thing.
I like to learn.
Learning=knowledge=power
lol

Thanks for the explanation.