NT Authority prompts shutdown

My bro's notebook has this problem: Everytime he connects
to the Internet, he gets a dialog box by "NT
Authority/System" prompting him to shut down.

The reason given is that "the Remote Procedure Call (RPC)
service terminated unexpectedly".

He can't update online since he always gets bootted when
online.

Thanks in advance!

BTW: Windows XP Pro came with his notebook.

He has the blaster virus. As soon as the you log on,
press CTRL+ALT+DEL, choose task manager and then
the "processes" tab.Scroll down the list until you find
an entry for MSblast.exe, highlight it and "end task".
This will stop the virus from running temporarily. Now
make sure that your firewall is running (if you don't
have a 3rd party one, use XP's built in one.(right click
your internet connection in network properties and choose
properties, then the advanced tab)

You should then be able to keep the computer running long
enough to either use windows update or visit the
microsoft website and do a search for "blaster".

If this fails, you will have to download the
patch/removal tool onto a CD or floppy from another
computer that isn't infected. Follow the instructions on
the website.

HTH
>-----Original Message-----
>My bro's notebook has this problem: Everytime he
connects
>to the Internet, he gets a dialog box by "NT
>Authority/System" prompting him to shut down.
>
>The reason given is that "the Remote Procedure Call
(RPC)
>service terminated unexpectedly".
>
>He can't update online since he always gets bootted when
>online.
>
>Thanks in advance!
>
>BTW: Windows XP Pro came with his notebook.
>.
>

Hi

The system has been infected by the Blaster Worm. Have a look at the following links:

www.kellys-korner-xp.com/xp_qr.htm#rpc

Courtesy of MVP Kelly Theriot.

"Virus Alert About the Blaster Worm and Its Variants"
http://support.microsoft.com/?id=826955

"What You Should Know About the Blaster Worm and Its Variants"
http://www.microsoft.com/security/incident/blast.asp

--

Will Denny
MS-MVP Windows - Shell/User


"John Wong" <johnwong@fotoshangri-la.com> wrote in message news:55ff01c42d00$be056110$a101280a@phx.gbl...
| My bro's notebook has this problem: Everytime he connects
| to the Internet, he gets a dialog box by "NT
| Authority/System" prompting him to shut down.
|
| The reason given is that "the Remote Procedure Call (RPC)
| service terminated unexpectedly".
|
| He can't update online since he always gets bootted when
| online.
|
| Thanks in advance!
|
| BTW: Windows XP Pro came with his notebook.


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.670 / Virus Database: 432 - Release Date: 27/04/2004

Thanks guys/gals!

Truly a life saviour - I've been searching the Microsoft
Knowledge base for AGES on this topic and couldn't find
an answer! ^_^

Rgds,
John Wong