Every time I get on line I get an error message that states "This system is going to shut down, save all information. This shut down was initiated by NT AUTHORITY\SYSTEM ......windows must restart because the remote procedure call (RPC) service terminated unexpectedly." What does this mean and how can it be fixed?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Help!
- Thread starter DeeWater
- Start date
You have the MSBlaster worm. To remove it, perform the following tasks:
The following instructions are in three parts:
1. Stop it from running
2. Remove it from your system
3. Make sure it doesn't come back
Before beginning, if you have an always-on internet connection, it's a good idea to disconnect it.
1. Stop it from running:
Press Ctrl-Alt-Delete to bring up the Task Manager, then on the Processes tab, click msblast.exe and then "End process." Reply "Yes" to the warning message that comes up.
This stops the worm from running, so your system will not shut down. However, it doesn't remove it, and if that's all you do, it will start up again the next time you boot.
2. Remove it from your system:
A. Start the registry editor program, regedit, by going to Start>> Run, and type: REGEDIT [Enter] Navigate to HKEY_Local_Machine\Software\Microsoft\Windows\Current Version\Run by clicking the plus signs next to each of the folders in the left hand pane. When you get to the last of them, Run, click the word Run itself. In the right pane of the resulting window, find an entry called "Windows Auto Update". Right-click it and delete it.
B. Go to Start> Search. Search in all files and folders for msblast, delete all files found.
You should have successfully removed the worm from your system. If you do not take necessary steps to prevent future infections, it could come back just as easily as it did the first time.
3. Make sure it doesn't come back:
A. Make sure you're running a firewall that prevents worms like this from getting in. You can enable the built-in Windows XP firewall, or download and install another one such as the free version of ZoneAlarm. To enable the built-in firewall, go to Control Panel, double-click Networking and Internet Connections,
then click Network Connections. Right-click your connection, then click Properties, and on the Advanced tab, click the option "Protect my computer and network..."
B. Be sure to use a good anti-virus program and that you update the definitions on a regular basis.
The following instructions are in three parts:
1. Stop it from running
2. Remove it from your system
3. Make sure it doesn't come back
Before beginning, if you have an always-on internet connection, it's a good idea to disconnect it.
1. Stop it from running:
Press Ctrl-Alt-Delete to bring up the Task Manager, then on the Processes tab, click msblast.exe and then "End process." Reply "Yes" to the warning message that comes up.
This stops the worm from running, so your system will not shut down. However, it doesn't remove it, and if that's all you do, it will start up again the next time you boot.
2. Remove it from your system:
A. Start the registry editor program, regedit, by going to Start>> Run, and type: REGEDIT [Enter] Navigate to HKEY_Local_Machine\Software\Microsoft\Windows\Current Version\Run by clicking the plus signs next to each of the folders in the left hand pane. When you get to the last of them, Run, click the word Run itself. In the right pane of the resulting window, find an entry called "Windows Auto Update". Right-click it and delete it.
B. Go to Start> Search. Search in all files and folders for msblast, delete all files found.
You should have successfully removed the worm from your system. If you do not take necessary steps to prevent future infections, it could come back just as easily as it did the first time.
3. Make sure it doesn't come back:
A. Make sure you're running a firewall that prevents worms like this from getting in. You can enable the built-in Windows XP firewall, or download and install another one such as the free version of ZoneAlarm. To enable the built-in firewall, go to Control Panel, double-click Networking and Internet Connections,
then click Network Connections. Right-click your connection, then click Properties, and on the Advanced tab, click the option "Protect my computer and network..."
B. Be sure to use a good anti-virus program and that you update the definitions on a regular basis.
- Status
Similar threads
