Need help with my PC problem :(

[JoshH]

After a couple minutes of being connected to the interner, I keep getting this pop up that says I have 1 minute to save all my work becasue of the NT Authority\System, it says the Remote Procedure call (RPC)service has terminated unexpectdly, and that the system is shutting down, then it disconnects me and restarts the whole computer.

Does anyone know what is wrong it and why it's doing this??

I'm using dial-up and have never had this happen before.

Could someone help? thanks.

[Atak Kat]

Sounds like quite a few people on the internet are getting the same problem and it's attributed to a Worm(s) that are going around affecting Windows computers.

more info here. (http://news.com.com/2100-1002-5062364.html?tag=nl)

-ak-

[CBRgirl]

DO THIS BEFORE SATURDAY! You won't be able to get the patch after that.
Hi, I had that worm, gone now, but what you have to do is FIRST! Hit alt+ctrl+del find msblast.exe and end process! In Control Panel, double-click "Networking and Internet Connections", and then click "Network Connections". Right-click the connection on which you would like to enable ICF, and then click "Properties". On the Advanced tab, click the box to select the option to “Protect my computer or network”. Then go to microsoft tech (http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/virus/alerts/msblaster.asp) download the patch, then go to http://www.symantec.com/ and download the worm removal tool. Install the patch, then go to the start menu, rt click on my computer, click properties, click system restore tab, click turn off system restore. Then run the worm removal tool (it should say 'worm removed from system') or something like that, empty your recycle bin, restart the computer, run the tool again, this time it should say no worm detected. You might also want to go to "search" in the start menu, look for msblast.exe, mine still had a file. Delete that, empty the recycle bin again. I restarted my computer once again just to be safe. Then go back to the start menu and go thru the system restore to turn system restore back on. You should be back in business. Good luck!!!

[Matt]

you don't have to do all that. Going through that babble you posted is pointless. Just apply patch and carry on with life.

Windows XP Patch (http://microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en)

Windows 2000 patch (http://microsoft.com/downloads/details.aspx?FamilyId=C8B8A846-F541-4C15-8C9F-220354449117&displaylang=en)

[slowpoke]

Get a Mac suckas!:twofinger

[Gragorin]

Or better yet, get a Mac (running OS X) and put your computer behind a decent statefull packet filter. That would be a firewall that checks packet state rather than just blocking ports.

[CBRgirl]

If you ALREADY have the worm, just using the patch isn't going to remove it.

[Matt]

Originally posted by CBRgirl
If you ALREADY have the worm, just using the patch isn't going to remove it.

yes it does.

[CBRgirl]

Believe me, that was the first thing I did and it didn't remove it.

[trackjunkie]

CBRgirl is correct.

If you have aquired the WORM it will reside on your system and continue to propagate. Just patching will only close the vunerability of your system but you still are a threat to other machines on the network that are unpatched.

[CBRgirl]

Thank You.

[Likely2BAirborn]

Ahh msblast. I have spent many a overtime hours at Nvidia, fighting this little bastard. CBRgirl is right. Here is a link to clear the virus if it is indeed there. The shutdown prompt is from another machine on your network flooding the rpc port. Theres a qucik way to check to see if you have it. Do a Ctrl+alt+delete. Click the process tab. Under that look for msblast.exe or penis32.exe <---:rolleyes. If either are there, download and run this bad boy. I suggest you do this to every machine you own.
http://www.trendmicro.com/ftp/products/tsc/tsc.zip