Automatic Shutdown?

[Anonymous]

"This system is shutting down. Please save all work in
progress and log off. Any unsaved changes will be lost.
This shutdown was initiated by NT AUTHORITY\SYSTEM

Time before shutdown: 00:00:46

Message ---------------------------
Windows must now restart because the Remote Procedure
Call (RPC) service terminated unexpectedly"

Does anyone know what this error is?

[Mike Kolitz]

Your computer appears to have been infected by a nasty new worm.
To remove the worm, please read the instructions provided below:

http://www.bigblackglasses.com/Article.aspx?Article=342
or
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

--
Mike Kolitz MCSE 2000
MS-MVP - Windows Setup and Deployment

PATCH YOUR WINDOWS NT/2000/XP/2003 COMPUTERS!
http://www.microsoft.com/technet/security/bulletin/MS03-026.asp

How to disinfect and infected computer:
http://www.bigblackglasses.com/Article.aspx?Article=342

"Anonymous" > wrote in message
...
> "This system is shutting down. Please save all work in
> progress and log off. Any unsaved changes will be lost.
> This shutdown was initiated by NT AUTHORITY\SYSTEM
>
> Time before shutdown: 00:00:46
>
> Message ---------------------------
> Windows must now restart because the Remote Procedure
> Call (RPC) service terminated unexpectedly"
>
> Does anyone know what this error is?

[Nicholas]

Read and follow the instructions in this article:

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=3D823980

**** You need to make sure you have a FIREWALL enabled ****

Open XP's "Help and Support" and type: FIREWALL , and hit enter.
Click on the topic titled "Enable or Disable Internet Connection =
Firewall".

Additional information from Symantec:

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability
http://securityresponse.symantec.com/avcenter/security/Content/8205.html

The RPC alert has been diagnosed as the W32.Blaster.Worm and removal=20
instructions are available from this Symantec link:=20
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.=
html


--=20
Nicholas

-------------------------------------------------------------------------=


"Anonymous" > wrote in message:
...

| "This system is shutting down. Please save all work in=20
| progress and log off. Any unsaved changes will be lost.=20
| This shutdown was initiated by NT AUTHORITY\SYSTEM
|=20
| Time before shutdown: 00:00:46
|=20
| Message ---------------------------
| Windows must now restart because the Remote Procedure=20
| Call (RPC) service terminated unexpectedly"
|=20
| Does anyone know what this error is?