Shutdown Initiated by NT Authority/System

[Marc Bromberg]

I am writing this for a friend who can't get his system
started. After 1 minute or so he get's a message
saying "System is shutting down, please save all work in
progress and log off". Any unsaved changes will be lost.
Shutdown Initiated by NT Authority/System. Windows must
now restart because the Remote Procedure Call (RPC)
Server unexpextedly terminated".
Can you suggest what to do.

[randwulf57]

Marc:
W32.BLASTER.WORM
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html
What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp
randwulf57

"Marc Bromberg" > wrote in message
...
> I am writing this for a friend who can't get his system
> started. After 1 minute or so he get's a message
> saying "System is shutting down, please save all work in
> progress and log off". Any unsaved changes will be lost.
> Shutdown Initiated by NT Authority/System. Windows must
> now restart because the Remote Procedure Call (RPC)
> Server unexpextedly terminated".
> Can you suggest what to do.

[Marc Reynolds [MSFT]]

Hi Marc,

It appears your computer has been infected with the Blaster virus. For more
information and how to fix this please see follow this link:

http://www.microsoft.com/security/incident/blast.asp

http://www.microsoft.com/security/protect/main.asp

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

[Kelly]

Hi Marc,

To stop the reboots: Go to Start/Run and type in: services.msc. Scroll down
to Remote Procedure Call (RPC)/Recovery/First Failure/Restart the Service.

Close Windows Explorer, run the edit on line 257 which includes the prompt
for the patch once your system has been cleaned.

This script removes all variants of the W32.Blaster.Worm (original, B, C, D,
E and F) and will inform you whether or not the patch is already installed.
http://www.kellys-korner-xp.com/xp_tweaks.htm. Direct download:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs

More information here:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Top 10 Frequently Asked Questions and Answers
http://www.kellys-korner-xp.com/top10faqs.htm


"Marc Bromberg" > wrote in message
...
> I am writing this for a friend who can't get his system
> started. After 1 minute or so he get's a message
> saying "System is shutting down, please save all work in
> progress and log off". Any unsaved changes will be lost.
> Shutdown Initiated by NT Authority/System. Windows must
> now restart because the Remote Procedure Call (RPC)
> Server unexpextedly terminated".
> Can you suggest what to do.