Unknown XP problem

[Dred]

I recently reformatted my computer because it would not
complete installation of the new McAfee Version 8.0 virus
scan. I'm on a LAN connection, so I disconnected that
before reformatting. After reformatting using my XP
disc, it allowed me to complete the McAfee installation.
I then connected to my LAN; within seconds McAfee caught
a virus several times. After 5 minutes the computer
would no long let McAfee to run. The McAfee screen would
come up then immediately disappear. The same thing
happens when I try to install the "WindowsXP-KB823980-x86-
ENU" update. I have downloaded all of the updates from
the microsoft site, but nothing has fixed this problem.
At random times I receive a message that says

"This system is shutting down. Please save all work in
progress and log off. Any unsaved changes will be lost.
this shutdown was initiated by NT AUTHORITY/SYSTEM

Windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly."

I'm given 1 minute, then the computer restarts on its
own. Every time I visit the update page at microsoft.com
it scans the computer and says that I need the same
updates I have already downloaded numerous times before.
I am at a loss for ideas. I am using Windows XP
Professional.

 

[Guest]

-----Original Message-----
I recently reformatted my computer because it would not
complete installation of the new McAfee Version 8.0 virus
scan. I'm on a LAN connection, so I disconnected that
before reformatting. After reformatting using my XP
disc, it allowed me to complete the McAfee installation.
I then connected to my LAN; within seconds McAfee caught
a virus several times. After 5 minutes the computer
would no long let McAfee to run. The McAfee screen would
come up then immediately disappear. The same thing
happens when I try to install the "WindowsXP-KB823980- x86-
ENU" update. I have downloaded all of the updates from
the microsoft site, but nothing has fixed this problem.
At random times I receive a message that says

"This system is shutting down. Please save all work in
progress and log off. Any unsaved changes will be lost.
this shutdown was initiated by NT AUTHORITY/SYSTEM

Windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly."

I'm given 1 minute, then the computer restarts on its
own. Every time I visit the update page at microsoft.com
it scans the computer and says that I need the same
updates I have already downloaded numerous times before.
I am at a loss for ideas. I am using Windows XP
Professional.
.nt authority is a wormblaster i had to totally

uninstall all windows software and reinstall good luck

 

[Haus]

Hello
If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

------------------------------------------------------------------

Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

Special note if you use AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm infections from
computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

MS03-039: A Buffer Overrun in RPCSS Could Allow
an Attacker to Run Malicious Programs
http://support.microsoft.com/default.aspx?kbid=824146





--
Hope This Helps
Haus
Not a MS-MVP
Not a MVP
Not nothing, just a good ole boy.

 

[Guest]

You have the simptoms of the msblast virus. First, physically disconect the compter from the network by unpluging the modem or cat. 5 cable from the computer. Next do a control+alt+delete, this should bring up the windows security dialog box. Choose the Task manager tab, and then click the Processes tab. Look for anything under image name that says msblast.exe, if there is, the virus is loaded in memory. Simply click on the file name and click the End Process Button

Next do a search, for the same file name, and delete any files that you find. Don't forget to empty the trash can. One othre important (and little known ) thing to do is go to start run and type in prefetch, this will bring up a list of files, look iin there for a file called msblast.pif or it may have another extension. It is ok to delete all the files in here as they are recreated as you go to different places on the internet. Lastly go to the Control Panel, Administrative tools, Services, and look for the RPC service (make sure it is the first one and not the RPC locator which is below it.) Click the recovery tab and chane all three boxes to take no action. Run your virus scan program again, and then reconnect the computer back to the network and you should be o.k

Hope this helps