Windows XP Home constantly shuts down when on internet.

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi
I'm running windows xp home and ie6.0. When on the internet (dial up) in 5 to 10 minutes I get the following error message..........
SYSTEM SHUT DOW

This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTE
Time before shutduown 00:00:2
Messag
Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly
........ I'm clueless as to what I need to do can some of you smart people help
thank
Mark
 
Virus Alert About the Blaster Worm and Its Variants
http://support.microsoft.com/default.aspx?scid=kb;en-us;826955

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-------------------------------------------------------------------------------------------------------------


| Hi,
| I'm running windows xp home and ie6.0. When on the internet (dial up) in 5 to 10 minutes I get the
following error message...........
| SYSTEM SHUT DOWN
|
| This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be
lost. This shutdown was initiated by NT AUTHORITY\SYSTEM
| Time before shutduown 00:00:27
| Message
| Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly.
| ....... I'm clueless as to what I need to do can some of you smart people help?
| thanks
| Mark
 
Hi,

What You Should Know About the Sasser Worm and Its Variants
http://www.microsoft.com/security/incident/sasser.asp

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;en-us;841720

The stinger tool helps in detecting and
cleaning the Sasser worm.
http://vil.nai.com/vil/stinger/



Mitigation Steps for Affected Computers
If your computer is infected with the W32.Sasser.worm,
please do the following:

Enable the Windows XP Internet Connection Firewall or a
third-party firewall on the affected computer.
Disconnect the computer from the Internet.
Restart the computer. If you have problems rebooting,
reboot in safe mode.
Press CTRL+ALT+DEL.
Click the Task Manager.
Click the Processes tab.
Press and hold the CTRL key and then click
C:\WINDOWS\avserve.exe and c:\WINDOWS\system32\*_up.exe.
Click the End Task button.
Click Start.
Click Search and then search for and delete the following
files:
C:\WINDOWS\avserve.exe
C:\WINDOWS\system32\*_up.exe
Click Start again, click Run, and then type: regedit32
Click OK.
In Registry Editor, locate and delete the following
registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run "avserve.exe" = C:\WINDOWS\avserve.exe
Connect the computer to the Internet.
Go to the Windows Update site, and click the Scan for
Updates button.
Download and install the critical updates recommended
after the scan.



http://www.microsoft.com/security/incident/sasser.asp


Download this update
Microsoft Security Bulletin MS04-011
Security Update for Microsoft Windows (835732)
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

Enable your firewall.

MORE ON SECURITY:

Three steps you can take to improve your computer's security:
http://www.microsoft.com/security/protect/

321050 Description of a Personal Firewall
http://support.microsoft.com/?id=321050

More info:

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.

worm.html
http://www.bullguard.com/antivirus/vit_randon_i.aspx
http://www.vsantivirus.com/sasser-a.htm

Good luckOn Thu, 13 May 2004 14:21:04 -0700, tahoemark
 
Back
Top