[geordie4000]

Hi this forum has been a real god send to get me this far there is no better resource

During the research process i have located the virus i have on my Lenovo Aspire one Laptop machine (with windows XP 2002) as:

NT Authority\System Error Message: "This system is shutting down. Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly."

Detailed here : http://support.gatew...tml#resolution1

I have followed the 3 resolutions in the above link especially using the W32.Blaster.Worm Removal Tool - the result was i had no virus...however i have since had the shutdown process happen time and time again.

Using 'shutdown -a' i have managed to abort the shutdowns

I can link the issue to a codec software i downloaded which has since been uninstalled, and downloaded zone alarm and enabled the windows firewall >>> ??? not sure if i should just be operating one ? will thye conflict with each other?

After all directions ive shutdown and restarted the machine and after trying the above im at a loss and so i have followed the final advice of doing a rootkit detection report as suggested here http://www.geekstogo...uide-t2852.html

I also tried this http://www.geekstogo...em-t223825.html but still got a shutdown happen.

Ive attached the MBAM report and GMER report (its not complete as the shutdown cut off when i didnt get the chance to prevent it so its 3/4 done) and OTL log will be uploaded asap as im overseas for two weeks but be grateful of feedback as ill be checking the forum regularly.

Many thanks in advance i really appreciate your help

Attached Files

•  mbam_log_2010_01_29__13_16_51_.txt   1.14KB   194 downloads
•  _GMER_101515381.txt   19.64KB   199 downloads
•  combofix_log.txt   18.28KB   199 downloads

Edited by geordie4000, 29 January 2010 - 03:43 AM.