View Full Version : Internet access shutdown NT Authority/System
Kirk
January 3rd 04, 01:06 PM
I just installed Windows XP this evening. I am encountering a problem with getting bumped off the internet. I get this message that Windows is going to shut down in so many seconds. The message indicates the shutdown is due to NT Authority/System and it is
because of failure in a Remote Procedure Call. This didn't happen with Windows ME. Can anybody help
Jupiter Jones [MVP]
January 3rd 04, 01:06 PM
Kirk;
Your computer most likely caught Blaster.
Windows 9X is immune and an unprotected Windows XP computer can catch
it in seconds.
Follow this to get rid of Blaster:
http://www3.telus.net/dandemar/blaster.htm
--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://www3.telus.net/dandemar/
"Kirk" > wrote in message
...
> I just installed Windows XP this evening. I am encountering a
problem with getting bumped off the internet. I get this message that
Windows is going to shut down in so many seconds. The message
indicates the shutdown is due to NT Authority/System and it is because
of failure in a Remote Procedure Call. This didn't happen with Windows
ME. Can anybody help
Ronnie Vernon MVP
January 3rd 04, 01:06 PM
Kirk wrote:
> I just installed Windows XP this evening. I am encountering a problem
> with getting bumped off the internet. I get this message that Windows
> is going to shut down in so many seconds. The message indicates the
> shutdown is due to NT Authority/System and it is because of failure
> in a Remote Procedure Call. This didn't happen with Windows ME. Can
> anybody help
You have the Blaster Worm virus.
To prevent the shutdown , click Start/Run and type cmd and click OK.
Type shutdown -a and press Enter in the command window.
Go to the following website for information and removal instructions.
http://www.kellys-korner-xp.com/xp_qr.htm#rpc
--
Ronnie Vernon
Microsoft MVP-Windows Shell/User
Please reply to the newsgroup so all may benefit.
http://www.dts-l.org
http://www.mvps.org
Austin Wise
January 3rd 04, 01:06 PM
I believe this is caused by the MS Blaster worm. You should enable the
default firewall, if not buy/download a third party one. Then find
instructions to remove the worm.
BTW, to stop the automatic shutdown so that you can perform these tasks, you
need to open a command prompt and type "shutdown -a".
Everything you need to know about MS Blaster. This includes information
about enabling the Windows Xp Internet Connect Firewall and third party
firewalls:
http://tinyurl.com/jsp3
"Kirk" > wrote in message
...
> I just installed Windows XP this evening. I am encountering a problem with
getting bumped off the internet. I get this message that Windows is going to
shut down in so many seconds. The message indicates the shutdown is due to
NT Authority/System and it is because of failure in a Remote Procedure Call.
This didn't happen with Windows ME. Can anybody help
TJThornton
January 3rd 04, 07:00 PM
I have the same problem and I have the firewall installed, Virus Scan running, and I'm up to date on service packs. I also ran McAfee's Stinger and no infected files. After doing what is posted here, I'm still getting that shutdown, although less frequen
tly, but now none of my system editing files,i.e. regedit, msconfig, system configuration utility will stay open. I open them and then they quit before I can even move the mouse. Please help. Have checked everywhere for an answer and am stumped.
Thanks.
Bruce Chambers
January 3rd 04, 09:28 PM
Greetings --
If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.
To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.
Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146
What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp
W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html
W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html
McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger
Bruce Chambers
--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
"Kirk" > wrote in message
...
> I just installed Windows XP this evening. I am encountering a
problem with getting bumped off the internet. I get this message that
Windows is going to shut down in so many seconds. The message
indicates the shutdown is due to NT Authority/System and it is because
of failure in a Remote Procedure Call. This didn't happen with Windows
ME. Can anybody help
TJThornton
January 3rd 04, 11:31 PM
Followed that advice from a previous post. All patches are up to date. All virus scan dat files are up to date and I ran the stinger. Also manually checked using Symantec's support recommendations. No viruses found. Firewall has been enabled. I also
took off system restore and returned to a time when I didn't have the quitting problems. All to no avail. I'm not having any shutdowns, but system configuration utility comes on at startup and quits immediately if I try to access it.. I also reran Stinge
r with Internet disconnected. Says the system is clean.
vBulletin® v3.6.4, Copyright ©2000-2012, Jelsoft Enterprises Ltd.