system shutdown

[Gary Thorn [MVP-Windows Technologies/Xbox]]

>-----Original Message-----
>New computer with Windows XP installed. When accessing
>Internet, approximately 5 minutes into session, system
>shuts down. Message states "... system shutdown
initiated
>by NT AUTHORITY\SYSTEM. WINDOWS MUST RESTART BECAUSE
>REMOTE PROCEDURE CALL (RPC) SERVICE TERMINATED
>UNEXPECTEDLY."
>
>Is this an XP, IE, PeoplePC.com or hardware (Dell)
>problem?
>.


This a virus called w32.Blaster.Worm

Patch from Microsoft:
http://tinyurl.com/h84v
More info from MS:
www.microsoft.com/security/incident/blast.asp

-------------------------------

From Symantec Security Response for the virus
w32.Blaster.Worm:
http://tinyurl.com/jozm

-------------------------------

From Kelly - MVP:
Close Windows Explorer, End Process in the Task Manager
for msblast.exe, run
the edit on line 257 then run the patch listed below it:
http://www.kellys-korner-xp.com/xp_tweaks.htm

Windows XP Security Patch: Buffer Overrun In RPC Interface
Could Allow Code
Execution: http://tinyurl.com/ir5h

More information here:
www.kellys-korner-xp.com/xp_qr.htm#rpc

-------------------------------

Install a firewall (software like or hardware like router)
to help prevent future similar issues.

Most users will be using the 32 bit edition of WinXP Home
and Pro.


Hope this helps!

Gary Thorn
MVP-Windows Technologies/Xbox
Associate Expert

This posting is provided "AS IS" with no warranties, and
confers no rights

More about the Windows XP Expert Zone:
www.microsoft.com/windowsxp/expertzone

More about the MS MVP Program:
http://tinyurl.com/n08