my computer shuts down unexpectedly...

[steve]

My computer shuts down unexpectedly. A box will appear
that says "the remote procedure call was terminated
unexpectedly. This is authorized by the NT Authoriy
System." It then shuts down within 60 seconds. If
anyone can help me with this I would greatly appreciate
it.

Thanks, Steve

[John E. Carty]

You have been infected with the MSBLAST worm. See the following for
patch/removal details:

http://support.microsoft.com/?kbid=823980

http://vil.nai.com/vil/content/v_100547.htm

"steve" > wrote in message
...
> My computer shuts down unexpectedly. A box will appear
> that says "the remote procedure call was terminated
> unexpectedly. This is authorized by the NT Authoriy
> System." It then shuts down within 60 seconds. If
> anyone can help me with this I would greatly appreciate
> it.
>
> Thanks, Steve
>

[Jupiter Jones [MVP]]

Steve;
You most likely have a worm W32.Blaster.Worm
DISCONNECT the subject computer from any network IMMEDIATELY.

Install or enable a firewall IMMEDIATELY:
http://support.microsoft.com/?kbid=283673

VERY IMPORTANT to follow ALL steps, closing ports or installing the
patch is NOT enough.
Download the appropriate patch referenced in Ron Martells article
below.
You may need to do this at an uninfected computer and burn to CD or
save on floppy.

This is the IMPORTANT fix by Ron Martell:
http://www.bigblackglasses.com/Article.aspx?Article=342

Also see:
http://isc.sans.org/diary.html?date=2003-08-11

After this is resolved prevent similar occurrences by installing ALL
Critical Updates from Windows Update.
Keep antivirus up to date and run at least weekly.
Install or enable a firewall.

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://dts-l.org/index.html


"steve" > wrote in message
...
> My computer shuts down unexpectedly. A box will appear
> that says "the remote procedure call was terminated
> unexpectedly. This is authorized by the NT Authoriy
> System." It then shuts down within 60 seconds. If
> anyone can help me with this I would greatly appreciate
> it.
>
> Thanks, Steve
>