system shutdown

[Carl]

Randomly a message window pops up saying "system shutdown
in ##seconds. From NT Authroity System; remote procedure
call service. ????

[Will Denny]

Hi

This is a posting from MVP Kelly Theriot:

****To stop the reboots: Go to Start/Run and type in: services.msc. =
Scroll down
to Remote Procedure Call (RPC)/Logon/First Failure/Restart the Service.

Then close Windows Explorer, End Process in the Task Manager for
msblast.exe, run the edit on line 257 then run the patch listed below =
it:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Windows XP Security Patch: Buffer Overrun In RPC Interface Could Allow =
Code
Execution: http://tinyurl.com/ir5h

More information here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc


--=20
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows=AE XP]****

Will

"Carl" > wrote in message =
...
> Randomly a message window pops up saying "system shutdown=20
> in ##seconds. From NT Authroity System; remote procedure=20
> call service. ????


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.518 / Virus Database: 316 - Release Date: 11/09/2003

[Ramesh]

Your system is infected by RPC (W32.Blaster) Worm. This is causing the
system to shutdown abnormally.

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

MS-MVP Kelly Theriot's Repair Solution:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability:
http://www.sarc.com/avcenter/security/Content/8205.html

http://www.updatexp.com/msblast-exe.html

http://www.eeye.com/html/Research/Advisories/AL20030811.html

http://aumha.org/win5/a/blaster.htm

--
Regards,
Ramesh



"Carl" > wrote in message
...
Randomly a message window pops up saying "system shutdown
in ##seconds. From NT Authroity System; remote procedure
call service. ????