NT Authority System RPC Remote Procedure

[John G]

Periodically when on the internet via a phone line my
computer will flash a sceen that says I have so many
minutes to save my work because the computer will shut
down. It then restarts automatically. I have no control
over this action. It states the reason "NT Authority
System RPC Remote Procedure"

My computer is a new Compaq, 4 months old.

Thank you for your help.

[Nicholas]

Apparently, your computer has an unwelcome visitor (VIRUS) known=20
as the WM32 Blaster/Lovsan WORM.

It entered the computer through the internet connection because the =
"firewall"
was not properly enabled and essential critical updates were not =
installed from
the Windows Update website. For instructions on fixing the problem, =
visit:

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp=20

Remove W32.MSBlast.Worm
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Blaster Worm: Critical Security Patch for Windows XP (32-bit version)
http://microsoft.com/downloads/details.aspx?FamilyId=3D2354406C-C5B6-44AC=
-9532-3DE40F69C074&displaylang=3Den

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

Then immediately turn-on Windows XP's built-in Firewall:

How do I turn on the Firewall?
http://www.andyrathbone.com/tips/firewall.html


**** IMPORTANT ****

Visit this web site if you experience difficulty installing=20
Windows XP Security Patch 823980:

How To Fix The Cryptographic Service Error
http://www.updatexp.com/cryptographic-service.html=20


--=20
Nicholas

--------------------------------------------------------------------

"John G" > wrote in message:
...

| Periodically when on the internet via a phone line my=20
| computer will flash a sceen that says I have so many=20
| minutes to save my work because the computer will shut=20
| down. It then restarts automatically. I have no control=20
| over this action. It states the reason "NT Authority=20
| System RPC Remote Procedure"
|=20
| My computer is a new Compaq, 4 months old.
|=20
| Thank you for your help.

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the worms.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"John G" > wrote in message
...
> Periodically when on the internet via a phone line my
> computer will flash a sceen that says I have so many
> minutes to save my work because the computer will shut
> down. It then restarts automatically. I have no control
> over this action. It states the reason "NT Authority
> System RPC Remote Procedure"
>
> My computer is a new Compaq, 4 months old.
>
> Thank you for your help.

[Chris Lanier]

You have got a virus, removal info at...
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

More info about the worm:
http://www.microsoft.com/security/incident/blast.asp

More info about the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

"John G" > wrote in message
...
> Periodically when on the internet via a phone line my
> computer will flash a sceen that says I have so many
> minutes to save my work because the computer will shut
> down. It then restarts automatically. I have no control
> over this action. It states the reason "NT Authority
> System RPC Remote Procedure"
>
> My computer is a new Compaq, 4 months old.
>
> Thank you for your help.