System Shut Down

[Kenny]

I just recently installed a new diamond supramax le 56k
dial up PCI modem. I can get online through SBC for about
5 minutes before an error report appears that says the
system is shutting down...authorized by NT
AUTHORITY/SYSTEM...an RPC procedure has been interrupted.

any ideas how to fix it?

 

[Carey Frisch [MVP]]

There are thousands of nasty computer viruses/worms looking for unprotected
computers. Your computer can be infected within a few milliseconds the moment
an internet connection is established if your computer is not properly secured.

Apparently, your computer is now infected with the W32.Blaster.Worm or one of its variants.
This happened because you have not been using an internet connection firewall and have
apparently neglected to install the critical updates available at the Windows Update website.

------------------------------------------------------------------

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

------------------------------------------------------------------

Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm infections from computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

A security issue has been identified that could allow an attacker to
remotely compromise a computer running Microsoft Windows and
gain complete control over it. You can help protect your computer
by installing this update from Microsoft.
http://www.microsoft.com/downloads/...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

------------------------------------------------------------------------------------


| I just recently installed a new diamond supramax le 56k
| dial up PCI modem. I can get online through SBC for about
| 5 minutes before an error report appears that says the
| system is shutting down...authorized by NT
| AUTHORITY/SYSTEM...an RPC procedure has been interrupted.
|
| any ideas how to fix it?

 

[Guest]

This system is being shut down in 60 seconds by NT Authority/System due to an interrupted Remote Procedure Call (RPC)

This version of the worm will only infect Windows 2000, Windows NT and Windows XP machines. Systems such as Windows 95, 98 and ME are unaffected

Recently, the MSBlaster Worm has infected several laptops and home computers of CMC faculty and staff. Unlike most viruses, this worm does not infect through e-mail messages. Instead, the worm is introduced directly into a computer through the internet connection when there is no "network firewall" protection (as is the case with most home DSL, Cable, and phone Modems) and the computer is not updated with Microsoft's recent (July 16th) security patch. We have already seen laptops that have been infected off campus brought back into the campus network where it is plugged in behind our firewall and begins trying to flood our network. We consider this to be a very serious problem. In order to protect the CMC network, IST is requesting all CMC owned laptop users to do one of the following

Bring your laptop in to RS12 for MSBlaster checking, cleaning, and patch update.
Download the pqremove_blaster.com cleaner and the appropriate patch for your operating system directly to your laptop. Disconnect from the network and run the self-extracting files.
If you already have the virus, this will remove the virus from your system. (To download this file, please right click on the link and choose to save the target.

The PQRemove Tool
http://updates.pandasoftware.com/pq-org/gen/blaster/pqremove.co

Patches for Systems: (To download these files, please right click on the link and choose to save the target.

Windows XP
http://download.microsoft.com/downl...ee-b7a52a983f01/WindowsXP-KB823980-x86-ENU.ex

Windows 2000
http://download.microsoft.com/downl...-b4b9d42049d5/Windows2000-KB823980-x86-ENU.ex

Windows NT
http://download.microsoft.com/download/6/5/1/651c3333-4892-431f-ae93-bf8718d29e1a/Q823980i.EX

http://www.microsoft.com/security/incident/blast.as