System Shutdown

  • Thread starter Thread starter George Voudouris
  • Start date Start date
G

George Voudouris

Hello!

Serious Problem!
I get the message:

This system is shutting down.Please save all work in
progress and log off.Any unsaved changes will be lost.
This shutdown was initiated by NT AUTHORITY/SYSTEM
Time before shutdown: (countdown from 50secs)
Message
Windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly

.....and the system shuts down!
Any suggestions welcome!

Thanking you in advance,
George
 
Hi George,

It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
its the remote procedure call. i dont know what it does
but i know that if it closes the system shuts down. i
think its something like svchost.exe
taskmanager/processes tab but im not sure. try not to
close that process
 
Back
Top