PDA

View Full Version : remote procedure call


hesham
December 6th 03, 06:10 PM
I recently installed Windows XP on my computer. Windows
keepsshutting down with a message "This shut down was
initiated by NT AUTHORITY\SYSTEM because RPC, remote
procedure call, was interrupted unexpectedly". I have
tried to repair and re-install the operating system few
times without success.
Any ideas as why this happens? and how to fix it?
Any ideas is very much appreciated.
Hesh

Ramesh [MVP]
December 6th 03, 06:10 PM
Hesh,

Warning!!!
Your system is infected by RPC (W32.Blaster) Worm. This is causing the
system to shutdown abnormally.

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.rem
oval.tool.html

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

MS-MVP Kelly Theriot's Repair Solution:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability:
http://www.sarc.com/avcenter/security/Content/8205.html

http://www.updatexp.com/msblast-exe.html

http://www.eeye.com/html/Research/Advisories/AL20030811.html

http://aumha.org/win5/a/blaster.htm


--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

~ Please reply to newsgroup ~


"hesham" > wrote in message
...
I recently installed Windows XP on my computer. Windows
keepsshutting down with a message "This shut down was
initiated by NT AUTHORITY\SYSTEM because RPC, remote
procedure call, was interrupted unexpectedly". I have
tried to repair and re-install the operating system few
times without success.
Any ideas as why this happens? and how to fix it?
Any ideas is very much appreciated.
Hesh

Chris Lanier
December 6th 03, 06:11 PM
(URL Wrap)
W32.Blaster.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

"Ramesh [MVP]" > wrote in message
...
> Hesh,
>
> Warning!!!
> Your system is infected by RPC (W32.Blaster) Worm. This is causing the
> system to shutdown abnormally.
>
> What You Should Know About the Blaster Worm
> http://www.microsoft.com/security/incident/blast.asp
>
> W32.Blaster.Worm Removal Tool
>
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.rem
> oval.tool.html
>
> MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
> http://support.microsoft.com/?kbid=823980
>
> MS-MVP Kelly Theriot's Repair Solution:
> http://www.kellys-korner-xp.com/xp_qr.htm#rpc
>
> Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability:
> http://www.sarc.com/avcenter/security/Content/8205.html
>
> http://www.updatexp.com/msblast-exe.html
>
> http://www.eeye.com/html/Research/Advisories/AL20030811.html
>
> http://aumha.org/win5/a/blaster.htm
>
>
> --
> Ramesh - Microsoft MVP
> http://www.mvps.org/sramesh2k
>
> Microsoft Most Valuable Professional Program
> http://mvp.support.microsoft.com
>
> ~ Please reply to newsgroup ~
>
>
> "hesham" > wrote in message
> ...
> I recently installed Windows XP on my computer. Windows
> keepsshutting down with a message "This shut down was
> initiated by NT AUTHORITY\SYSTEM because RPC, remote
> procedure call, was interrupted unexpectedly". I have
> tried to repair and re-install the operating system few
> times without success.
> Any ideas as why this happens? and how to fix it?
> Any ideas is very much appreciated.
> Hesh
>
>

Marc Reynolds [MSFT]
December 6th 03, 06:11 PM
It appears your computer has been infected with the Blaster virus. For more
information and how to fix this please see follow this link:

http://www.microsoft.com/security/incident/blast.asp

http://www.microsoft.com/security/protect/main.asp


--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.


"hesham" > wrote in message
...
> I recently installed Windows XP on my computer. Windows
> keepsshutting down with a message "This shut down was
> initiated by NT AUTHORITY\SYSTEM because RPC, remote
> procedure call, was interrupted unexpectedly". I have
> tried to repair and re-install the operating system few
> times without success.
> Any ideas as why this happens? and how to fix it?
> Any ideas is very much appreciated.
> Hesh

Google