XP home ed.

[Ed Berinato]

I have a friend who is running Xp Home Edition.. Recently she has been
getting a system shutdown (wether on line or not) which counts down to shut
off of WinXP. The error message it displays while counting down the seconds
(60) is "NT Authority\System :Remote procedure call shutdown". I have no
idea of what it is or how to stop it and the "help" resource of XP is no
help. It is only a recent event as she has had XP for months now without
this error. Could anyone provide help and insight as to what the problem is
and how to stop it from shutting down her system. Thank you in advance.
__________________________________________________________________
__________________________________________________________________

 

[Doug Knox MS-MVP]

This is indicative of an attack by the W32.Blaster Worm. See
www.kellys-korner-xp.com/xp_tweaks.htm, Line 257, Left column for a small
utility that will kill and remove all 3 known variants of this virus, and
some instanaces of another virus that piggybacks in with it. When the
utility is run, it will tell you whether or not you're infected, and will
prompt you to install the appropriate Microsoft patch, to prevent
reinfection, if it isn't already installed. Then update your antivirus
software, religiously, and scan your system to make sure that you're not
reinfected, or that the "possible" second virus is gone.

 

[Bruce Chambers]

Greetings --

W32.Blaster.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Microsoft Security Bulletin MS03-26
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH