System Shutdown initiated by NT Authority System

[Kelly]

In the past hour, I have received this message 5 times
and the countdown begins to shutdown.....

"Windows must now restart because the remote procedure
call service terminated unexpectedly."

I'm not sure it this is my cable service, or something
else

 

[Chris Lanier]

You have got a virus, removal info at...
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

More info about the worm:
http://www.microsoft.com/security/incident/blast.asp

More info about the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

 

[Al]

...But I have this problem from a newly formated and
installed Windows system. As soon as I connect the
network cable I start getting the same countdown. I am
sure I don't have a virus since I have done this on two
seperate machines and both were new installs: i.e. format,
and install Windows, connect net cable and bam I start
getting the countdown to shutdown???

 

[Theatre Of Lights]

Infection can take place in less than 5 minutes of being online...

 

[nut]

..But I have this problem from a newly formated and
installed Windows system. As soon as I connect the
network cable I start getting the same countdown. I am
sure I don't have a virus since I have done this on two
seperate machines and both were new installs: i.e. format,
and install Windows, connect net cable and bam I start
getting the countdown to shutdown???

A "new install" infers that the RPC patch has not yet been installed.

Both machines are infected and it's your ignorance which is helping the worm
propagate.

 

[Bruce Chambers]

Greetings --

It doesn't matter how new the installation is; if you connected
the PC to the Internet before installing the KB823980 Hotfix and
before enabling a firewall, you're very likely to be infected now.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Bruce Chambers]

Greetings --

W32.Blaster.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Microsoft Security Bulletin MS03-26
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH