System Shutdown Error Msg

[nat]

Dear NewUsers Forum:

Just today I started to get an error message saying:

"This system is shutting down. Please save all work in progress and log
off. Any unsaved changes will be lost. This shutdown initiated by NT
Authority\system...Windows remote procedure call (RPC) service terminated
unexpectedly"

This happens only after several minutes I'm on-line. The system shuts down,
exits XP and restarts (or freezes). My virus checker (fully up-to-date) did
not find anything.

Suggestions / feedback are welcome.

Nathan

[Nicholas]

Nathan --

Read and follow the instructions in this article:

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=3D823980

**** You need to make sure you have a FIREWALL enabled ****

Open XP's "Help and Support" and type: FIREWALL , and hit enter.
Click on the topic titled "Enable or Disable Internet Connection =
Firewall".

Additional information from Symantec:

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability
http://securityresponse.symantec.com/avcenter/security/Content/8205.html

The RPC alert has been diagnosed as the W32.Blaster.Worm and removal=20
instructions are available from this Symantec link:=20
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.=
html


--=20
Nicholas

-------------------------------------------------------------------------=
-

"nat" > wrote in message:
...

| Dear NewUsers Forum:
|=20
| Just today I started to get an error message saying:
|=20
| "This system is shutting down. Please save all work in progress and =
log
| off. Any unsaved changes will be lost. This shutdown initiated by NT
| Authority\system...Windows remote procedure call (RPC) service =
terminated
| unexpectedly"
|=20
| This happens only after several minutes I'm on-line. The system shuts =
down,
| exits XP and restarts (or freezes). My virus checker (fully =
up-to-date) did
| not find anything.
|=20
| Suggestions / feedback are welcome.
|=20
| Nathan
|=20
|

[Mike Kolitz]

Your computer appears to have been infected by a nasty new worm.
To remove the worm, please read the instructions provided below:

http://www.bigblackglasses.com/Article.aspx?Article=342
or
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

you can prevent your computer from shutting down by clicking Start / Run.
Type SHUTDOWN -A. Click OK.

--
Mike Kolitz MCSE 2000
MS-MVP - Windows Setup and Deployment

PATCH YOUR WINDOWS NT/2000/XP/2003 COMPUTERS!
http://www.microsoft.com/technet/security/bulletin/MS03-026.asp

How to disinfect and infected computer:
http://www.bigblackglasses.com/Article.aspx?Article=342

"nat" > wrote in message
...
> Dear NewUsers Forum:
>
> Just today I started to get an error message saying:
>
> "This system is shutting down. Please save all work in progress and log
> off. Any unsaved changes will be lost. This shutdown initiated by NT
> Authority\system...Windows remote procedure call (RPC) service terminated
> unexpectedly"
>
> This happens only after several minutes I'm on-line. The system shuts
down,
> exits XP and restarts (or freezes). My virus checker (fully up-to-date)
did
> not find anything.
>
> Suggestions / feedback are welcome.
>
> Nathan
>
>

[Ellen Wiest]

After a very frustrating day I think I finally cured the problem we have all
been experincing. The biggest problem was to download the Microsoft fix, but
the worm kept shuting down the computer. But it help when I turned on the
firewall protection and then I went on the internet and went to microsoft
upgrades where I found the patch. I then went to symantic and found that
there was a new cure, just released TODAY!!! that should cure the problem.
Most of this info came from a call to ATT (800-400-1447) who is my carrier.
I hope all of you who had this problem will soon be over it.