System Shutdown

[George Voudouris]

Hello!

Serious Problem!
I get the message:

This system is shutting down.Please save all work in
progress and log off.Any unsaved changes will be lost.
This shutdown was initiated by NT AUTHORITY/SYSTEM
Time before shutdown: (countdown from 50secs)
Message
Windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly

.....and the system shuts down!
Any suggestions welcome!

Thanking you in advance,
George

 

[Rick \Nutcase\ Rogers]

Hi George,

It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[PeTe]

its the remote procedure call. i dont know what it does
but i know that if it closes the system shuts down. i
think its something like svchost.exe
taskmanager/processes tab but im not sure. try not to
close that process