PDA

View Full Version : forced shutdown


Huw Jones
December 14th 03, 12:19 PM
I don't know if I can help much - though I can say I have
had the exact same problem. Just to clarify, the pop up
box says: "This system is shutting down. Please save all
work in progress and log off. Any unsaved changes will be
lost. This shutdown was initiated by NT AUTHORITY\SYSTEM

Time before shutdown: (allows one minute)

Message
Windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly."

If so, then I believe that it is a result of
the "Microsoft Windows DCOM RPC Interface Buffer Overrun
Vulnerability" found at
http://securityresponse.symantec.com/avcenter/security/Con
tent/8205.html
At that site, you can download a patch and get a little
info on the problem. I installed it yesterday on this PC
and havn't had the problem occur since.

However, for me the problem began when I was online (not
downloading anything or receiving emails), and had not
installed any new hardware for days.
Also note that if you have a LAN, this thing (may be a
virus) spreads. I'm not sure that it is a virus, cos I
ran Norton online virus checker for my system and found
nothing.
Hope that helps,

Huw Jones )

Cari \(MS-MVP\)
December 14th 03, 12:19 PM
You have the MBlaster worm.

See the article by Mike Kolitz (MVP) at
http://www.bigblackglasses.com/Article.aspx?Article=342

Cari
www.coribright.com

"Huw Jones" > wrote in message
...
> I don't know if I can help much - though I can say I have
> had the exact same problem. Just to clarify, the pop up
> box says: "This system is shutting down. Please save all
> work in progress and log off. Any unsaved changes will be
> lost. This shutdown was initiated by NT AUTHORITY\SYSTEM
>

Google