Shutdown initiated by NTAUTHORITY\SYSTEM

[Aless]

Last night while using ftp program, I got a message saying:

System is shutting down. Save all open programs etc (with 30 seconds given
to save data)
Shutdown initiated by NTAUTHORITY\SYSTEM

This morning a friend of mine got the same system failure whilst using IE
(on a different computer)!

Anyone know what this is and how to stop it happening?

dg

 

[Nicholas]

Aless --

Read and follow the procedures outlined in the following articles:

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

**** You need to make sure you have a FIREWALL enabled ****

Open XP's "Help and Support" and type: FIREWALL , and hit enter.
Click on the topic titled "Enable or Disable Internet Connection Firewall".

Essential Security Tools for Home Office Users
http://www.microsoft.com/technet/tr...l=/technet/columns/security/5min/5min-105.asp

Last, but not least, consider purchasing and installing a good
internet security package, such as:

Norton Internet Security 2003
http://www.symantec.com/sabu/nis/nis_pe/

-- Includes Norton AntiVirus 2003
-- Includes Norton Personal Firewall
-- Includes prevention of annoying web pop-ups
-- Includes Parental Controls
-- All in one, easy-to-install & manage package


--
Nicholas

-------------------------------------------------------------------------------------------


| Last night while using ftp program, I got a message saying:
|
| System is shutting down. Save all open programs etc (with 30 seconds given
| to save data)
| Shutdown initiated by NTAUTHORITY\SYSTEM
|
| This morning a friend of mine got the same system failure whilst using IE
| (on a different computer)!
|
| Anyone know what this is and how to stop it happening?
|
| dg
|
|

 

[Erin]

This happened to me this week. I first searched the
knowledge base which said it's a printer driver problem,
but that didn't fix it. I even called Tech Support; it
took them 3 hours to tell me that something I downloaded in
the automatic updates looked like it screwed something up.

So I booted into Safe Mode, System Restore and went back a
couple weeks. The system has been fine since then.

 

[Kelly]

Hi Erin,

To stop the reboots: Go to Start/Run and type in: services.msc. Scroll down
to Remote Procedure Call (RPC)/Recovery/First Failure/Restart the Service.

Then close Windows Explorer, run the edit on line 257 then run the patch
listed below it: http://www.kellys-korner-xp.com/xp_tweaks.htm

Windows XP Security Patch: Buffer Overrun In RPC Interface Could Allow Code
Execution: http://tinyurl.com/ir5h

More information here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc


/xp_tweaks.htm

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm