Windows XP Home OS

[SC Lim]

I often get this message interrupting my work:

windows shutting down.Initiated by NT AUTHORITY/SYSTEM.
RPC Services terminated unexpectedly.

What can I do about it? Anybody out there who help? would
really appreciate.

Also often times the system hangs for no apparent reason
and the reset by ctrl/alt/delete keys gets no response!
Please advise.

Rgds.

[Ramesh]

Your system is infected by RPC (W32.Blaster) Worm. This is causing the
system to shutdown abnormally.

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution (Install
MS03-039 also)
http://support.microsoft.com/?kbid=823980

MS-MVP Kelly Theriot's Repair Solution:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability:
http://www.sarc.com/avcenter/security/Content/8205.html

http://www.updatexp.com/msblast-exe.html

http://www.eeye.com/html/Research/Advisories/AL20030811.html

http://aumha.org/win5/a/blaster.htm

--
Regards,
Ramesh
AOL: SRamesh2k

«·´`·.(*·.¸(`·.¸ ¸.·´)¸.·*).·´`·»
«.............. Ramesh ...............»
«·´`·.(¸.·´(¸.·* *·.¸)`·.¸).·´`·»

~ Please reply to newsgroup ~


"SC Lim" > wrote in message
...
I often get this message interrupting my work:

windows shutting down.Initiated by NT AUTHORITY/SYSTEM.
RPC Services terminated unexpectedly.

What can I do about it? Anybody out there who help? would
really appreciate.

Also often times the system hangs for no apparent reason
and the reset by ctrl/alt/delete keys gets no response!
Please advise.

Rgds.

[Chris Lanier]

You have got a virus, removal info at...
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

More info about the worm:
http://www.microsoft.com/security/incident/blast.asp

More info about the worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

"SC Lim" > wrote in message
...
> I often get this message interrupting my work:
>
> windows shutting down.Initiated by NT AUTHORITY/SYSTEM.
> RPC Services terminated unexpectedly.
>
> What can I do about it? Anybody out there who help? would
> really appreciate.
>
> Also often times the system hangs for no apparent reason
> and the reset by ctrl/alt/delete keys gets no response!
> Please advise.
>
> Rgds.

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
installed the KB824146 Hotfix, without having first installed an
antivirus application with current virus definition files, and before
enabling a firewall, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"SC Lim" > wrote in message
...
> I often get this message interrupting my work:
>
> windows shutting down.Initiated by NT AUTHORITY/SYSTEM.
> RPC Services terminated unexpectedly.
>
> What can I do about it? Anybody out there who help? would
> really appreciate.
>
> Also often times the system hangs for no apparent reason
> and the reset by ctrl/alt/delete keys gets no response!
> Please advise.
>
> Rgds.