Computer warns about shut-down when loggin on net.

[LLv34_Snefens]

Every time I log on I get a pop-up after a little while, that says that the computer will be shut down in 60 seconds and I should save and close everything I'm doing.

It says the cause is that "this shutdown was initiated by NT AUTHORITY\SYSTEM" the Remote Procedure Call (RPC) terminated unexpectetly.

I can't take a screenshot of it, because Copy/paste doesn't work once the warning comes up.

Anyone knows what's going on? I checked for viruses and everything seems clear.

Running WinXP with SP1.
Non-fixed IP ADSL

[bloom25]

Have you installed any security critical updates recently?  One of them updates this.  (This is the vulnerability that supposedly is already being exploited online.)  If you did, maybe you got a corrupted download or the install process failed.

The Windows XP patch is at http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

[LLv34_Snefens]

Thanks, will try that.

I hadn't updated windows for a couple of months, and had a 24.3MB file to download with the autoupdate. Took a while since the shutdown happend 5sec-5 min after logon, but luckily it remembers what's been downloaded so far.

Fingers crossed. No pop-ups for 10 min now.

[LLv34_Snefens]

Yep, that did it. Thank you very much.

BTW. I also updated my viruschecker (also something I was behind with), and it kept finding the file at the same time it started the shutdown. It could delete it of course, but that only helped until the file sneaked through the loophole again.

[bloom25]

http://www.hitechcreations.com/forums/showthread.php?s=&threadid=93729

Looks like you aren't the only one who has this problem.

[minus]

u still have the WORM!!!!


\use the link below get rie of it

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html


u need latest virusdefinition to realy get ride of the worm !