NT ATHORITY SYSTEM

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I've just recently changed to windows xp. I was having problems at first cause of the Virsues going around, so I've updated from windows update and upgraded my AntiVirus to 2004. that seemed to help regain most of my problems exsept one , I countinuelly get a message pop up," windows must shut down ,inisiated by NT ATHORITY\SYSTEM
Remote procedure (RPC) serive termanated unxpectedly." I can't find a why to stop it or solve this problem. Can't get anything done til I do. Help PLEASE, I'm not computer wise and poor, got nowhere to turn for help.
 
I've just recently changed to windows xp. I was having problems at first
cause of the Virsues going around, so I've updated from windows update and
upgraded my AntiVirus to 2004. that seemed to help regain most of my
problems exsept one , I countinuelly get a message pop up," windows must
shut down ,inisiated by NT ATHORITY\SYSTEM .
Remote procedure (RPC) serive termanated unxpectedly." I can't find a why
to stop it or solve this problem. Can't get anything done til I do. Help
PLEASE, I'm not computer wise and poor, got nowhere to turn for help.

Sounds much like blaster virus or some other using RPC vounerability.

http://www.microsoft.com/security/incident/blast.asp

You should install all patches for windows etc. If RPC keeps killing your
system before you manage do that there are two things you might like to
consider. Installing FIREWALL, and if that do not help...

Go Start => Run and type SERVICES.MSC (or go Control Panel =>
Administrative Tools => Services) and then find "Remote Procedure Call
(RPC)", right click on it and select Properties. to Recovery tab and change
"Restart the Computer"'s to "Restart the Service".

Thing above is not "CURE" for situation, but it lets you stay online long
enough to update things and get them sorted and then you can set things back
to "Restart the Computer" for RPC failures again...

Besides that...

Here's 5 steps that EVERY computer owner should do (or have, for last two
steps) if they want to make sure their system is not infested with spyware,
trojans and viruses... And even these steps are not 100% perfect.

1. first download download spybot seek & destroy from
http://security.kolla.de
install it, UPDATE it, and RUN it...

2. second, AdAware from www.lavasoft.de install it, UPDATE it, RUN
it...
--- sofar you should have quite spyware free system ---


3. third, download spywareblaster
http://www.javacoolsoftware.com/spywareblaster.html install it, UPDATE it
and RUN it...

--- after this you should have system that's protected from some spyware
stuff, not ALL though ---


4. get yourself virus killer if you do not have... www.grisoft.com has free
virus killer it you bother dig up more their site to download free version,
install, UPDATE and run it...

--- after this your system should be protected from most viruses ---


5. get yourself FIREWALL if you do not have it... Usually free firewall like
ZoneAlarm (www.zonelabs.com) will do just fine...

--- and after this step, you should beable to see when something in your
system tries to connect outside from your system etc ---


1st and 2nd steps are both good programs, but I never trust only one of them
myself because I am bit too paranoid with my network security. So I run
both.. both are good, but nothing is perfect so better be sure...

spywareblaster "protects" your system from spyware etc. so it's also good
idea to run it also...

Virus killer and firewall are usually VERY important part, If you have winXP
you might have it's inbuilt firewall on, that helps some, but it does not
show outbound connections that are sometimes very good to "notice"

and remember to UPDATE/RUN those programs regularly just to stay safe
side on things...
 
Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Greetings --

I'm often surprised that there are still people on this planet who
have _not_ heard of Blaster and Welchia. How can so many people live
completely beyond the reach of radio, television, newspapers, and
magazines, and still have Internet access? And if they have Internet
access, why don't they use it to keep themselves informed of the world
around them? It boggles the mind.

Perhaps the OP just got a new computer, for the very first time,
and heretofore had no reason to heed any of the great many news
reports on the subject. Still, it's hard to imagine anyone being so
completely unaware of the world in which they purportedly live.


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Back
Top