system shutdown

[gordon]

I just upgraded to xp home edition and after I am up and
running for a few minutes I get a box that says, "system
shutdown, remote procedure call (rpc) service terminated
unexpectedly". Then my computer shuts down and restarts.

 

[dev]

gordon said:

I just upgraded to xp home edition and after I am up and
running for a few minutes I get a box that says, "system
shutdown, remote procedure call (rpc) service terminated
unexpectedly". Then my computer shuts down and restarts.

It's always wise to search this group, prior to posting. "Rpc" and
"remote" brings up dozens of posts with tips and links on this topic.
One mentions this site, which will help you remove the worm that has
infested your PC.

http://www3.telus.net/dandemar/blaster.htm

 

[Shenan Stanley]

I just upgraded to xp home edition and after I am up and
running for a few minutes I get a box that says, "system
shutdown, remote procedure call (rpc) service terminated
unexpectedly". Then my computer shuts down and restarts.

Should have turned on that firewall before connecting to the internet and
then patched fully. Welcome to the wonderful world of MS Blaster! That's
right - you got a worm! heh

Now - turn on that firewall...
http://www.microsoft.com/WindowsXP/home/using/howto/homenet/icf.asp
If you are getting "Messenger Service" popups - this will also remedy those.

Get rid of Blaster:
http://www.microsoft.com/security/incident/blast.asp

After you get rid of it...

Make sure you have all the updates (critical) installed from:
http://windowsupdate.microsoft.com/
(Scan for updates, Review and Install)


Get rid of the spy/ad/mal-ware..

Spybot Search and Destroy
http://www.safer-networking.org/

Lavasoft AdAware
http://www.lavasoft.de

Hijack This!
(For browser Hijacks - also look into CWS Shredder)
http://mjc1.com/mirror/hjt/

And Assortment of Others:
http://www.merijn.org/downloads.html


After you cleanup your PC somewhat of spy/ad/mal-ware, verify your antivirus
software is updated and run a full scan of your computer. If you have no
antivirus software - get one NOW!
http://www.grisoft.com/us/us_dwnl_free.php

 

[Rick \Nutcase\ Rogers]

Hi Gordon,

When the shutdown warning appears, click start/run and enter "shutdown -a"
to halt the process. It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Rick \Nutcase\ Rogers]

Tried the search from the CDO interface lately? To says it stinks would be a
compliment. I can't blame anyone for not using it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Guest]

You can stop it this way. Most posters don't know it
won't let you read anything from the links they post. (
It shuts you down !! dah!! )


You have a virus = Mblaster Follow the steps below.

1. Go to control Panel> Network connections > *Your
connection* rt click >properties, Advanced Tab, check to
enable> The Firewall.

2. Do a Ctrl + Alt + DeL , on task manager highlight
MBlaster.exe and end the Process.

3. Go here and download the fix.

http://www.microsoft.com/downloads/details.aspx?
FamilyId=E70A0D8B-FE98-493F-AD76-
BF673A38B4CF&displaylang=en

4. Get a XP update;
http://v4.windowsupdate.microsoft.com/en/default.asp

 

[dev]

Rick "Nutcase" Rogers said:

Tried the search from the CDO interface lately? To says it stinks would be a
compliment. I can't blame anyone for not using it.

Last week. Agreed. It's ...

 

[Ken Blake, MVP]

In

I just upgraded to xp home edition and after I am up and
running for a few minutes I get a box that says, "system
shutdown, remote procedure call (rpc) service terminated
unexpectedly". Then my computer shuts down and restarts.

You have the MSBlaster worm. Go to
http://www.microsoft.com/downloads/...8b-fe98-493f-ad76-bf673a38b4cf&displaylang=en