unwnanted shutdown

[Ericht]

I get a message that states:
This system is shutting down..This shutdown was initiated
by NT AUTHORITY\SYSTEM

Message: Windows must restart because the Remote Procedure
Call (RPC) service terminated unexpectedly.

What's happening?

What or who is the NT AUTHORITY\SYSTEM?

What is the Remote Procedure Call?

 

[Carey Frisch [MVP]]

Apparently, your computer is infected with the W32.Blaster.Worm or one of its variants.
This happened because you have not been using an internet connection firewall and have
neglected to install the critical updates available at the Windows Update website.

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

Are you looking for info about the cause of "Remote Procedure Call (RPC)",
initiated by NT Authority\System error message that shuts down Windows
(you might also see svchost.exe error occasionally)?
http://www.faqs.org/rfcs/rfc1831.html

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

------------------------------------------------------------------------------------


| I get a message that states:
| This system is shutting down..This shutdown was initiated
| by NT AUTHORITY\SYSTEM
|
| Message: Windows must restart because the Remote Procedure
| Call (RPC) service terminated unexpectedly.
|
| What's happening?
|
| What or who is the NT AUTHORITY\SYSTEM?
|
| What is the Remote Procedure Call?

 

[Chuck]

I get a message that states:
This system is shutting down..This shutdown was initiated
by NT AUTHORITY\SYSTEM

Message: Windows must restart because the Remote Procedure
Call (RPC) service terminated unexpectedly.

What's happening?

What or who is the NT AUTHORITY\SYSTEM?

What is the Remote Procedure Call?

You have been infected by the Blaster worm.
http://www.microsoft.com/security/incident/blast.asp
http://www.sophos.com/support/disinfection/blastera.html

You need to:
1) Disconnect this computer from the network immediately.
2) Protect yourself. Install a software firewall or get a NAT router
for protection.
3) Remove the infection. See the above articles for instructions.
4) Connect to the internet.
5) Update your system. Install MS03-039 first for protection.
6) Install and update your virus protection.

Please do not connect to the internet until you perform step 3.

Chuck
I hate spam - PLEASE get rid of the spam before emailing me!
Paranoia comes from experience - and is not necessarily a bad thing.