shutdown

[Bob Beattie]

Recently I have experienced the following problem.
Shortly after making an internet connection I get a pop-up
which tells me to save my work as my computer is about to
be shut down and restarted. After 1 minute this happens.
The pop-up tells me it comes from NT AUTHORITY\SYSTEM and
is due to " remote procedure call terminated unexpectedly.
Any ideas would be appreciated.
Bob.

 

[Frank Saunders, MS-MVP]

Looks like you've got the new Blaster virus. I have attached a
zipped copy of a script that will disinfect your machine.

Information:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc
Microsoft Security Bulletin MS03-026:
http://www.microsoft.com/technet/security/bulletin/MS03-026.asp?frame=true
MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980
Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability
http://securityresponse.symantec.com/avcenter/security/Content/8205.htm
To clean it up:
http://www.bigblackglasses.com/Article.aspx?Article=342
or a zipped script:
http://www.bigblackglasses.com/staff/downloads/msblast2.zip

Here's the attachment.