RPC service terminated, shutdown

[Joe]

My HP laptop with the Windows XP Home Addition has
started shutting down unexpectedly, usually when I am
online with my dial-up connection. Message is "The
system is shutting down.....Shutdown was initiated by NT
AUTHORITY\SYSTEM. Windows must now restart because the
Remote Procedure Call (RPC) Service terminated
unexpectedly."

Any ideas?

Thanks

Joe Racine

 

[Nicholas]

Joe --

Apparently, your computer has an unwelcome visitor (VIRUS) known
as the WM32 Blaster/Lovsan WORM.

It entered the computer through your internet connection because the "firewall"
was not properly enabled and essential critical updates were not installed from
the Windows Update website. For instructions on fixing the problem, visit:

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Remove W32.MSBlast.Worm
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Blaster Worm: Critical Security Patch for Windows XP (32-bit version)
http://microsoft.com/downloads/deta...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

Then immediately turn-on Windows XP's built-in Firewall:

How do I turn on the Firewall?
http://www.andyrathbone.com/tips/firewall.html


**** IMPORTANT ****

Visit this web site if you experience difficulty installing
Windows XP Security Patch 823980:

How To Fix The Cryptographic Service Error
http://www.updatexp.com/cryptographic-service.html


--
Nicholas

------------------------------------------------------------------------------


| My HP laptop with the Windows XP Home Addition has
| started shutting down unexpectedly, usually when I am
| online with my dial-up connection. Message is "The
| system is shutting down.....Shutdown was initiated by NT
| AUTHORITY\SYSTEM. Windows must now restart because the
| Remote Procedure Call (RPC) Service terminated
| unexpectedly."
|
| Any ideas?
|
| Thanks
|
| Joe Racine

 

[Marc Reynolds [MSFT]]

Hi Joe,

It appears your computer has been infected with the Blaster virus. For more

information and how to fix this please see follow this link:

http://www.microsoft.com/security/incident/blast.asp

http://www.microsoft.com/security/protect/main.asp

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Kelly]

Hi Joe,

To stop the reboots: Go to Start/Run and type in: services.msc. Scroll down
to Remote Procedure Call (RPC)/Recovery/First Failure/Restart the Service.

Close Windows Explorer, run the edit on line 257 which includes the prompt
for the patch once your system has been cleaned. This script removes all
variants of the W32.Blaster.Worm (original, b and c) and will inform you
whether or not the patch is already installed.
http://www.kellys-korner-xp.com/xp_tweaks.htm. Direct download:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs

More information here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc


/xp_tweaks.htm

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm