Windows XP shuts itself down repeatedly

[Steve]

Hi;

I was helping a friend get her HP laptop hooked up to the internet the
other weekend.

She is running XP.

I set up a dialup account for her. Then I changed the loon-n-feel to
windows classic ( she hated the xp look ).

After I did these things XP started givign her an error message about
remote procedure calls failing and that it would shut the system down
( it does ).

Anyone have any ideas what this is about?

Steve

 

[Chris Holden]

Hi;

I was helping a friend get her HP laptop hooked up to the internet the
other weekend.

She is running XP.

I set up a dialup account for her. Then I changed the loon-n-feel to
windows classic ( she hated the xp look ).

After I did these things XP started givign her an error message about
remote procedure calls failing and that it would shut the system down
( it does ).

Anyone have any ideas what this is about?

Steve

She most likely has the blaster worm. You only have to connect an
unprotected machine to the internet once to get it.
When the shutdown countdown starts go to: Start> run> type 'shutdown -a'
without the quotes. Hit okay. Do it again should the countdown start again
during the process.
Then go Start> contol panel> network connections> select your internet
connection and right click it. Select properties. Click the advanced tab and
tick the 'protect this...' box. Hit okay until the boxes disappear.
Now go to
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
and read the page. Download the fixblast.exe (link about half way down that
page). Run it.
When the machine is clean, go to windowsupdate.com and download all the
recommended fixes.
Chris

 

[Carey Frisch [MVP]]

There are thousands of nasty computer viruses/worms looking for unprotected
computers. Your computer can be infected within a few milliseconds the moment
an internet connection is established if your computer is not properly secured.

Apparently, your computer is now infected with the W32.Blaster.Worm or one of its variants.
This happened because you have not been using an internet connection firewall and have
apparently neglected to install the critical updates available at the Windows Update website.

------------------------------------------------------------------

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

------------------------------------------------------------------

Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm infections from computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

A security issue has been identified that could allow an attacker to
remotely compromise a computer running Microsoft Windows and
gain complete control over it. You can help protect your computer
by installing this update from Microsoft.
http://www.microsoft.com/downloads/...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------------


| Hi;
|
| I was helping a friend get her HP laptop hooked up to the internet the
| other weekend.
|
| She is running XP.
|
| I set up a dialup account for her. Then I changed the loon-n-feel to
| windows classic ( she hated the xp look ).
|
| After I did these things XP started givign her an error message about
| remote procedure calls failing and that it would shut the system down
| ( it does ).
|
| Anyone have any ideas what this is about?
|
| Steve

 

[Steve Lee]

Could this be a version of the MS Blaster worm causing the shutdown? Just
had similar problems myself. I downloaded the MS Blast fix from the Symantec
web site and that fixed the problem.

 

[Guest]

Yes but did you also put in a firewall/antivirus/and
download the update from microsoft? If not you have left
yourself open to get it again and again and again along
with many other worms.

 

[Steve]

(e-mail address removed) (Steve) wrote

After I did these things XP started givign her an error message about
remote procedure calls failing and that it would shut the system down
( it does ).

<snip fyi about blaster worm >

Thanks for the info everyone!

Steve

 

[Rich/rerat]

PC is probably infected with MBlaster.exe worm. Check with your AV support page for removal procedures. Also you use a firewall on your PC or Network.

Virus Info can be found at:
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Virus Info can also be found at:
http://support.microsoft.com/default.aspx?scid=kb;en-us;826234


--

Rich/rerat

Add MS News Server to your OE with news://msnews.microsoft.com/
(RRR News) <message rule>

<<Previous Text Snipped to Save Bandwidth When Appropriate>>

After I did these things XP started givign her an error message about
remote procedure calls failing and that it would shut the system down
( it does ).

<snip fyi about blaster worm >

Thanks for the info everyone!

Steve

 

[Guest]

Sounds like the blaster worm to me