NT AUTHORITY\SYSTEM-system shut down

  • Thread starter Thread starter Bel
  • Start date Start date
B

Bel

My husband and I just purchased a new notebook with xp on
it. Since day 1 every once in a while a system shut down
will occur saying it was brought on by a RPC Remote
Procedure Call and shutsdown. I lose any new settings and
unsaved material. I went thru the event viewer and found
the error went thru properties and clicked on the link
for additional info but there is none. HelpD! How do I
stop or prevent this from happening? Help

Thanks for your time
Bel
 
Bel --

Apparently, your computer has an unwelcome visitor (VIRUS) known
as the WM32 Blaster/Lovsan WORM.

It entered the computer through the internet connection because the "firewall"
was not properly enabled and essential critical updates were not installed from
the Windows Update website. For instructions on fixing the problem, visit:

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Remove W32.MSBlast.Worm
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Blaster Worm: Critical Security Patch for Windows XP (32-bit version)
http://microsoft.com/downloads/deta...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

Then immediately turn-on Windows XP's built-in Firewall:

How do I turn on the Firewall?
http://www.andyrathbone.com/tips/firewall.html


**** IMPORTANT ****

Visit this web site if you experience difficulty installing
Windows XP Security Patch 823980:

How To Fix The Cryptographic Service Error
http://www.updatexp.com/cryptographic-service.html


--
Nicholas

--------------------------------------------------------------------------


| My husband and I just purchased a new notebook with xp on
| it. Since day 1 every once in a while a system shut down
| will occur saying it was brought on by a RPC Remote
| Procedure Call and shutsdown. I lose any new settings and
| unsaved material. I went thru the event viewer and found
| the error went thru properties and clicked on the link
| for additional info but there is none. HelpD! How do I
| stop or prevent this from happening? Help
|
| Thanks for your time
| Bel
 
Bel said:
My husband and I just purchased a new notebook with xp on
it. Since day 1 every once in a while a system shut down
will occur saying it was brought on by a RPC Remote
Procedure Call and shutsdown. I lose any new settings and
unsaved material. I went thru the event viewer and found
the error went thru properties and clicked on the link
for additional info but there is none. HelpD! How do I
stop or prevent this from happening? Help

Thanks for your time
Bel
Click to expand...

You are infected with the Blaster worm.

1. Get Doug Knox's Blaster removal script:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs
2. Get the Microsoft patch from
http://support.microsoft.com/default.aspx?scid=kb;en-us;823980#WinXP

If possible do the first two steps on an uninfected computer and copy
the downloaded files to a 3.5 inch diskette (they will both fit on the
same 1.44 mb diskette) or burn them to a CD

3. Disconnect from the Internet. Unplug Cable/DSL modem if you have
one. That prevents reinfection during the time interval between
running the script and the completion of the patch installation.
4. Run the script.
5. Install the patch.
6. Activate the Internet Connection Firewall in Windows XP
7. Reconnect to the Internet. Update your antivirus software and do
a complete scan.
8. Go to the Windows Update and get all repeat all of the critical
updates for your computer.

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."
 
Back
Top