Win XP - System shutdowns initiated by NT Authority

[shapes]

window appears at unexpected times indicating system will
shutdown in 60 seconds and advises to close all programs
and save work in process.


shutdown notice window reads:
"System shutdown initiated by NT AUTHORITY\SYSTEM"
"Message: Windows must restart because the Remote
Proceedure Call (RPC) service terminated unexpectedly."


The event viewer last logged this error entry as follows -
Date: 10/16/2003 Source: Service Control Manager
Time: 4:43:48 PM Category: None
Type: Error Event ID: 7031
User: N/A
Computer: Prime
Description:
The Remote Proceedure Call (RPC) service terminated
unexpectedly. It has done this 1 time(s). The following
corrective action will taken in 60000 milliseconds -
Reboot the machine.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


The MS link to knowledge base has no information on this
error.

Any fix suggestions?

- Shapeshifting

 

[Ramesh [MS-MVP]]

Your system is infected by RPC (W32.Blaster) Worm. This is causing the
system to shutdown abnormally.

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.rem
oval.tool.html

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

MS-MVP Kelly Theriot's Repair Solution:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability:
http://www.sarc.com/avcenter/security/Content/8205.html

http://www.updatexp.com/msblast-exe.html

http://www.eeye.com/html/Research/Advisories/AL20030811.html

http://aumha.org/win5/a/blaster.htm


--
Regards,
Ramesh [MS-MVP]
Aim: SRamesh2k
(e-mail address removed)
http://www.mvps.org/sramesh2k

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

~ Please reply to newsgroup ~


window appears at unexpected times indicating system will
shutdown in 60 seconds and advises to close all programs
and save work in process.


shutdown notice window reads:
"System shutdown initiated by NT AUTHORITY\SYSTEM"
"Message: Windows must restart because the Remote
Proceedure Call (RPC) service terminated unexpectedly."


The event viewer last logged this error entry as follows -
Date: 10/16/2003 Source: Service Control Manager
Time: 4:43:48 PM Category: None
Type: Error Event ID: 7031
User: N/A
Computer: Prime
Description:
The Remote Proceedure Call (RPC) service terminated
unexpectedly. It has done this 1 time(s). The following
corrective action will taken in 60000 milliseconds -
Reboot the machine.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


The MS link to knowledge base has no information on this
error.

Any fix suggestions?

- Shapeshifting