system shuting down

[Guest]

I installed xp/home secessfuly. Then about 10min or after
bootup a receive something about the gereric protocal and
ok it, the I get a box telling me the system is shuting
down and give about 4min. It said the remote procedure
call service was terminated, and the messege was issued by
the nt authority. Hope someone can help,Thanks.

 

[Carey Frisch [MVP]]

There are thousands of nasty computer viruses/worms looking for unprotected
computers. Your computer can be infected within a few milliseconds the moment
an internet connection is established if your computer is unsecured.

Apparently, your computer is now infected with the W32.Blaster.Worm or one of its variants.
This happened because you have not been using an internet connection firewall and have
apparently neglected to install the critical updates available at the Windows Update website.

------------------------------------------------------------------

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

------------------------------------------------------------------

Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm infections from computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

A security issue has been identified that could allow an attacker to
remotely compromise a computer running Microsoft Windows and
gain complete control over it. You can help protect your computer
by installing this update from Microsoft.
http://www.microsoft.com/downloads/...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

------------------------------------------------------------------------

(e-mail address removed) wrote in message:

| I installed xp/home secessfuly. Then about 10min or after
| bootup a receive something about the gereric protocal and
| ok it, the I get a box telling me the system is shuting
| down and give about 4min. It said the remote procedure
| call service was terminated, and the messege was issued by
| the nt authority. Hope someone can help,Thanks.

 

[Rick \Nutcase\ Rogers]

Hi,

When the shutdown warning appears, click start/run and enter "shutdown -a"
to halt the process. It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Guest]

You can stop it this way. Most posters don't know it
won't let you read anything from the links they post. (
It shuts you down !! dah!! )


You have a virus = Mblaster Follow the steps below.

1. Go to control Panel> Network connections > *Your
connection* rt click >properties, Advanced Tab, check to
enable> The Firewall.

2. Do a Ctrl + Alt + DeL , on task manager highlight
MBlaster.exe and end the Process.

3. Go here and download the fix.

http://www.microsoft.com/downloads/details.aspx?
FamilyId=E70A0D8B-FE98-493F-AD76-
BF673A38B4CF&displaylang=en

4. Get a XP update;
http://v4.windowsupdate.microsoft.com/en/default.asp