ANYONE?? RPC Shutdown?

[Chelle]

I can be in the mist of doing something and a box will
pop up saying Initialed by NT Authority/System Windows
must now restart becasue Remote Procedure Call (RPC)
Service Terminated Unexpectedly. Then it does a
countdown and shuts the system down and restarts it.

I have done a COMPLETE Factory Restore of my system but
right after, it still did it again.

Since I have updated all Windows files and so far it has
not popped back up, but I expect it will any minute.

Any and all help with this will be greatly appreciated!
Thanks!!
Chelle

[Darin]

> I can be in the mist of doing something and a box will
> pop up saying Initialed by NT Authority/System Windows
> must now restart becasue Remote Procedure Call (RPC)
> Service Terminated Unexpectedly. Then it does a
> countdown and shuts the system down and restarts it.

I have several customers running Windows XP that are complaining of
this same issue. I am thining that it might be related to the the RPC
patch that Microsoft was so insistent that everyone install. Here is
the link.

E:\Documents and Settings\darin\Local Settings\Temporary Internet
Files\OLK15\MS03-026.html

I am going to install this patch on those systems and see what
happens. By the way, I found that if I unplug my internet
connection, the problem stops.

[Rich Barry]

Wendy's link shortened http://tinyurl.com/h5l9
"Chelle" > wrote in message
...
> I can be in the mist of doing something and a box will
> pop up saying Initialed by NT Authority/System Windows
> must now restart becasue Remote Procedure Call (RPC)
> Service Terminated Unexpectedly. Then it does a
> countdown and shuts the system down and restarts it.
>
> I have done a COMPLETE Factory Restore of my system but
> right after, it still did it again.
>
> Since I have updated all Windows files and so far it has
> not popped back up, but I expect it will any minute.
>
> Any and all help with this will be greatly appreciated!
> Thanks!!
> Chelle
>

[Ron Martell]

"Chelle" > wrote:

>I can be in the mist of doing something and a box will
>pop up saying Initialed by NT Authority/System Windows
>must now restart becasue Remote Procedure Call (RPC)
>Service Terminated Unexpectedly. Then it does a
>countdown and shuts the system down and restarts it.
>
>I have done a COMPLETE Factory Restore of my system but
>right after, it still did it again.
>
>Since I have updated all Windows files and so far it has
>not popped back up, but I expect it will any minute.
>
>Any and all help with this will be greatly appreciated!
>Thanks!!
>Chelle


This is caused by a new and rapidly spreading virus.

To clear up the "NT Authority\System" and RPC call errors:

1. Go to http://support.microsoft.com/?kbid=823980 and download the
security patch. If at all possible do this on a clean machine and
copy the patch to a 3.5 inch diskette.

2. Boot the infected machine into Safe Mode. Insert the 3.5 inch
diskette with the patch on it and run it. Do not reboot yet.

3. Use Start - Run - MSCONFIG and go to the Startup tab. Locate the
entry for MSBLAST.EXE and clear the checkbox for it.

4. Use Start - Run - REGEDIT and locate and delete the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
"windows auto update"="msblast.exe"

5. Use Start - Search and check all your hard drives for the file
MSBLAST.EXE and delete all copies of it.

6. Shut down and restart the computer normally.

7. Immediately do an update of your antivirus software and when the
updates are installed do a complete virus scan of your hard drive. So
far Symantec/Norton, Trend Micro (PC-Cillin) and Sophos seems to be
the only major companies with an update for this specific virus (4:30
p.m. PDT 11 Aug 2003) but the others will undoubtedly follow within 24
hours.


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."