[excellent_baleine]

last year, I had a problem with a blaster worm on another computer. today, I started getting messages similar to the ones I was getting then:



System Shutdown

This system is shutting down. Please save all
work in progress and log off. Any unsaved
changes will be lost. This shutdown was
initiated by NT AUTHORITY\SYSTEM

Time before shutdown : 00:00:59

Message
Windows must now restart because the
Remote Procedure Call (RPC) service
terminated unexpectedly



this is not the correct information. It was not initiated by NT AUTHORITY\SYSTEM, and something other than the RPC terminated unexpectedly. This was an example on a website about the blaster worm.

It's happened about four times now, and the messages are becoming more frequent, just as they did when I had problems with the other computer. eventually (with the other computer), the restarts became so frequent that I wouldn't have time to do anything, and finally, the computer would restart, without a message, as soon as the desktop appeared.

I ran the FixBlast program, but a blaster worm was not found. still, is there something I can do to stop the restarts, and end this process before it gets out of hand again?

Edited by excellent_baleine, 13 June 2006 - 01:24 PM.

[Advertisements]

Please follow the procedures outlined here: Malware Removal Guide

You will need a PC which can connect to the internet

Run all the programmes as advised then post a current Hijack This Log in a new topic in the Malware Forum

For the purpose of accurate malware analysis, Hijack This Logs are only dealt with in the Malware Forum. Posting them anywhere else will result in a delayed response

If you are unable to run any of the programmes, please ask for advice in the Malware Forum

[Retired Tech]

Please follow the procedures outlined here: Malware Removal Guide

You will need a PC which can connect to the internet

Run all the programmes as advised then post a current Hijack This Log in a new topic in the Malware Forum

For the purpose of accurate malware analysis, Hijack This Logs are only dealt with in the Malware Forum. Posting them anywhere else will result in a delayed response

If you are unable to run any of the programmes, please ask for advice in the Malware Forum