NT Authority System

  • Thread starter Thread starter Sharel
  • Start date Start date
S

Sharel

I have Windows XP on my Sony laptop and am the only
user. Starting late on 8/5/03 I received a pop up that
looked like a windows popup, the bar accross the top says
NT Authority System ....Remote Procedure Call....service
terminated unexpectedly.... it tells me to logout of
whatever I am doing and there is a count down to restart
my computer. my computer shuts down and when it restarts
I have a message that says it can't open a file TFTP2452
do I want to delete or open from a chosen file. Last wee
I deleted it. I haven't done anything with it this time
but I haven't a clue what this is all about. I do know
it is getting annoying. HELP! and Thanks!
 
I am pretty sure this applies to you might want to double
check. It is a post from Kent earlier this week when
referencing TFTP file problem such as yours.

-----

It's too late for you. You have already been taken over by
an RPC attack as per MS03-026 vulnerability. You need to
disconnect from the Internet, run an AV/trojan/worm
scanner and identify the infection, then download a
removal tool or instructions from your AV vendor's site
and remove the infection if possible. Once you are clean,
install the critical update and a firewall to block any
reinfection and then you can reconnect to the Internet.
However, if this is a complete takeover, you may need to
do a clean reinstall to rid yourself of whatever the
attacker has added since taking over your machine.

-- Kent W. England, Microsoft MVP for Windows
 
Sharel left a note on my windscreen which said:
I have Windows XP on my Sony laptop and am the only
user. Starting late on 8/5/03 I received a pop up that
looked like a windows popup, the bar accross the top says
NT Authority System ....Remote Procedure Call....service
terminated unexpectedly.... it tells me to logout of
whatever I am doing and there is a count down to restart
my computer. my computer shuts down and when it restarts
I have a message that says it can't open a file TFTP2452
do I want to delete or open from a chosen file. Last wee
I deleted it. I haven't done anything with it this time
but I haven't a clue what this is all about. I do know
it is getting annoying. HELP! and Thanks!
Click to expand...

MS Blast worm.

Information here;

http://www.visualante.org/msblast/

http://homepage.ntlworld.com/michaelgadge/shutdownproblem.htm

http://www.microsoft.com/technet/treeview/default.asp?
url=/technet/security/bulletin/MS03-026.asp
 
Back
Top