Windows XP automatic shutdown problem

[Graham Walters]

Hi,

I keep getting the following message when I am on the
internet......
'This System is shutting down please save all work in
progress and log off. Any unsaved changes will be lost
Thisa shutdown was initiated by NT Authority\System
Message...Windows must restart because the Remote
Procedure Call (RPC) Service terminated unexpectedly'

My machine then shuts down after about a 60 second
countdown and it cannot be stopped. Can anyone help me?
Can I stop this from happenning?
I am using windows XP and ntl broadband.

 

[Rick \Nutcase\ Rogers]

Hi Graham,

It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x

Associate Expert - WinXP - Expert Zone

 

[BillW]

Your machine has been infected with the Blaster Worm.
see http://www.microsoft.com/security/incident/blast.asp
for details

 

[Noliniel]

-----Original Message-----
Hi,

I keep getting the following message when I am on the
internet......
'This System is shutting down please save all work in
progress and log off. Any unsaved changes will be lost
Thisa shutdown was initiated by NT Authority\System
Message...Windows must restart because the Remote
Procedure Call (RPC) Service terminated unexpectedly'

My machine then shuts down after about a 60 second
countdown and it cannot be stopped. Can anyone help me?
Can I stop this from happenning?
I am using windows XP and ntl broadband.

.

Is a virus you getting. Install all your windows
updates , that should fix it.

 

[Alex Nichol]

I keep getting the following message when I am on the
internet......
'This System is shutting down please save all work in
progress and log off. Any unsaved changes will be lost
Thisa shutdown was initiated by NT Authority\System
Message...Windows must restart because the Remote
Procedure Call (RPC) Service terminated unexpectedly'

You have the Blast worm (or relative). Go to
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

For instructions and a cleaning script. It has a link to the patch that
prevents a recurrence, but ensure that you turn on the firewall before
going to get it, or you will likely get re-infected while doing so. (At
Network Connections, r-click your connection, Properties,, and check the
Enable box on the Advanced page)