Forced shutdowns

[maryc]

I have two XP pro machines that have started getting NT
authority messages that a forced shutdown will happen,
please save all open work.
Why does this happen?
Data is getting lost.

[Nicholas]

Read and follow the instructions in this article:

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=3D823980

**** You need to make sure you have a FIREWALL enabled ****

Open XP's "Help and Support" and type: FIREWALL , and hit enter.
Click on the topic titled "Enable or Disable Internet Connection =
Firewall".

Additional information from Symantec:

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability
http://securityresponse.symantec.com/avcenter/security/Content/8205.html

--=20
Nicholas

--------------------------------------------------------------------

"maryc" > wrote in message:
...

| I have two XP pro machines that have started getting NT
| authority messages that a forced shutdown will happen,
| please save all open work.
| Why does this happen?
| Data is getting lost.
|

[Patrick Pitre]

It seems that installing the patch is only part of the fix. There still
might be an offending file on your machine that needs to be removed.

go here for instructions:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.htm
l

For further information, go here:
http://securityresponse.symantec.com/avcenter/security/Content/8205.html

Good luck. Please post back and let us know if this fixed the problem.

Patrick Pitre


"maryc" > wrote in message
...
> I have two XP pro machines that have started getting NT
> authority messages that a forced shutdown will happen,
> please save all open work.
> Why does this happen?
> Data is getting lost.
>

[Rene Kehoe]

I too am experiencing force shutdowns in the past week (first week in
August).
I have an XP Home machine and have started getting the message "Windows must
restart because Remote Procedure Call (RPC) service quit unexpectedly." I am
searching for more info on RPC but have not found anything that will help me
yet.

Rene Kehoe


"maryc" > wrote in message
...
> I have two XP pro machines that have started getting NT
> authority messages that a forced shutdown will happen,
> please save all open work.
> Why does this happen?
> Data is getting lost.
>

[Jonathan Maltz [MS-MVP]]

Install:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
As soon as you can!

Also enable Windows XP's built in firewall:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;283673

Then go to WindowsUpdate to pick up the latest updates:
http://windowsupdate.microsoft.com

More info about the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

--
--Jonathan Maltz [Microsoft MVP - Windows Server]
http://www.imbored.biz - A Windows Server 2003 visual, step-by-step
tutorial site :-)
Only reply by newsgroup. If I see an email I didn't ask for, it will be
deleted without reading.


"Rene Kehoe" > wrote in message
...
> I too am experiencing force shutdowns in the past week (first week in
> August).
> I have an XP Home machine and have started getting the message "Windows
must
> restart because Remote Procedure Call (RPC) service quit unexpectedly." I
am
> searching for more info on RPC but have not found anything that will help
me
> yet.
>
> Rene Kehoe
>
>
> "maryc" > wrote in message
> ...
> > I have two XP pro machines that have started getting NT
> > authority messages that a forced shutdown will happen,
> > please save all open work.
> > Why does this happen?
> > Data is getting lost.
> >
>
>

[Unknown]

First turn on your firewall. Then control panel---administrative
tools---services and restart 'remote procedure call' and reboot.
"Rene Kehoe" > wrote in message
...
> I too am experiencing force shutdowns in the past week (first week in
> August).
> I have an XP Home machine and have started getting the message "Windows
must
> restart because Remote Procedure Call (RPC) service quit unexpectedly." I
am
> searching for more info on RPC but have not found anything that will help
me
> yet.
>
> Rene Kehoe
>
>
> "maryc" > wrote in message
> ...
> > I have two XP pro machines that have started getting NT
> > authority messages that a forced shutdown will happen,
> > please save all open work.
> > Why does this happen?
> > Data is getting lost.
> >
>
>