Re: SYSTEM SHUTTING DOWN

From: Larry Samuels MS-MVP XP \(Shell/User\) (larry_at_mvps.org)
Date: 08/17/03


Date: Sun, 17 Aug 2003 17:36:59 -0400


You are infected with the blaster worm.
Go here for a removal tool:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

There are 2 more variants out now.
The exes for the variants are teekids.exe and penis32.exe
Kelly's script kills all 3 variants.

If you are having trouble staying up to get the patch and removal tool:
When the shutdown prompt appears,go to start/run and type
shutdown -a to abort the shutdown process to allow you to stay up and
online.

-- 
Larry Samuels MS-MVP  (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone - www.microsoft.com/windowsxp/expertzone
"EILEEN" <ROSCOMEAD@MSN.COM> wrote in message
news:016a01c364e3$5565e200$a101280a@phx.gbl...
> NO MATTER WHAT WE DO AND CALLED FOR TECH SUPPORT, OUR
> SYSTEMS, KEEPS SAYING SYSTEM SHUTTING DOWN
>
> INITATES BY NT AUTHORITY SYSTEMS
> REMOTE PROCEDURE CALLS WINDOWS RPC
> WINDOWS SERVICE TERMINATED UNEXPECTLY


Relevant Pages

  • Re: Explorer shutdown by NT Authority/System
    ... "What You Should Know About the Blaster Worm and Its Variants" ... firewall and go to the Windows Update website to ... > shutdown notice which starts a countdown. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: XP Upgrade - RPC shut-down
    ... sure you've enabled a firewall before starting, ... W32.Blaster.Worm Removal Tool ... RPC Shutdown activated through the Windows NT ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: svchost64.exe virus
    ... When you get the shutdown message... ... This will halt the shutdown and give you a chance to Download the McAfee worm removal tool, ... If you don't patch the PC and not use a FireWall then you will ... | it happens everytime when i start windows.. ...
    (microsoft.public.security.virus)
  • Re: Windows shutting down
    ... sure you've enabled a firewall before starting, ... W32.Blaster.Worm Removal Tool ... > Windows is shutting down - close programs and save all ... Shutdown initiated by NT\Authority System. ...
    (microsoft.public.windowsxp.general)
  • Re: NT AUTHORITY QUESTION
    ... You are infected with the blaster worm or one of it's variants. ... Run the tool to remove the worm,then follow the onscreen prompts to download ... When the shutdown prompt appears,go to start/run and type ... >I RECENTLY RE-INSTALLED WINDOWS ON A CLOANED PC THAT WAS ...
    (microsoft.public.windowsxp.security_admin)

Quantcast