System Shutdown from Remote Procedure Call

  • Thread starter Thread starter Dustin
  • Start date Start date
D

Dustin

My computer has started shutting down automatically from
a "NT Authority/System" Remote Procedure Call. I boot it
up and a small square with the countdown timer with the
above "System Shutdown" message shows up. What gives.
How can I use my computer. Does this have to do with
firewall? Please help.
Dustin
 
Dustin said:
My computer has started shutting down automatically from
a "NT Authority/System" Remote Procedure Call. I boot it
up and a small square with the countdown timer with the
above "System Shutdown" message shows up. What gives.
How can I use my computer. Does this have to do with
firewall? Please help.
Dustin
Click to expand...
Hi Dustin.

You are under attac...
....MSBlast alias Lovsan is probably the name of this worm...

=> Enable the firewall in your dial-up or network adapter before you go
onine
=> windowsupdate.microsoft.com - all critical patches (may be a lot, depends
on when you did it the last time)
=> Search e.g. on google: "Cleaning Lovsan OR MSBlast" and follow the
instructions

Cheers,
Hausi

P.S. a personal firewall and an active up-to-date virusscanner may be a good
idea for you?
(e.g. free for personal use are: www.zonealarm.com / www.freeav.com - or
many others)
 
Dustin said:
My computer has started shutting down automatically from
a "NT Authority/System" Remote Procedure Call. I boot it
up and a small square with the countdown timer with the
above "System Shutdown" message shows up. What gives.
How can I use my computer. Does this have to do with
firewall? Please help.
Dustin
Click to expand...

That would be the MS Blaster worm. There is a download on the
microsoft web site to update your operating system and eliminate the
worm.

If the system is shutting down, click the start button, hit run, type
shutdown -a. That will abort the shutdown.

The symantec web site has a cleaning tool that you can download. The
cleaning tool should be downloaded and used after the os update has
been applied.

I'm familiar with this because I just went through it with my machine.
MS support lead me through the fix. Good Luck.
 
You have the Blaster worm......
First, stop the bug from running by hitting CTRL-ALT-DELETE and
bringing up the task manager. Look for msblast.exe in the list, and
kill it. Now your computer won't shut down, but the bug is still there
and will run the next time you start your machine. Go to this URL to
find out how to get rid of it:
<http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.re
moval.tool.html>







See www.kellys-korner-xp.com/xp_qr.htm#rpc
<http://www.kellys-korner-xp.com/xp_qr.htm> for a quick removal tool for the
MSBlast worm and a link to the Microsoft patch to prevent future infection.
Then update your antivirus software and scan your system.
 
Back
Top