Link to home
Start Free TrialLog in
Avatar of kanary
kanary

asked on

My windows shuts down unexpectedly

hello experts,

here is my problem:

when i connect to the internet, after few minute this message appears:

"This system is shutting down, plzz save all ur work in progress and log off, any unsaved changes will be lost, this shutdown was initiated by NTAUTHORITY\SYSTEM

Message:
windows must restart because the Remote Procedure Call (RPC) service terminated unexpectedly."

and it shuts down in 60 seconds.

i tried to repair the windows installation, but the problem still exists.
i opened the services to notice the RPC, it suddenly get stopped and a windows error message appears, then the message above appears.

why allllll this ?

am i getting hacked?
ASKER CERTIFIED SOLUTION
Avatar of war1
war1
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jhance
jhance

SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
MadonnaC,
   Thank you for confirming what we have already posted.
Avatar of kanary

ASKER

thx every body for ur speedy help,

gemarti  u r right, the msblast.exe is the damn culprit :))

but why did it happen suddenly yesterday, every thing was fine before?
>>but why did it happen suddenly yesterday, every thing was fine before

This worm has emerged recently.

August First week:
**************
Around the Internet, system administrators report strange "rebooting" of their Windows systems as they are being taken over remotely, and many firewall watchers report a jump in scans for port 135. This problem is especially explosive because an attacker can run a rogue program by merely sending packets to a remote machine using any one of various ports. One of these, port 135, is commonly used to send pop-up messages across a network.

Microsoft released the security patch in July and unpatched systems are only vulnerable.

in future, have the latest patches installed from:

http://windowsupdate.microsoft.com
>> the msblast.exe is the damn culprit :))

The RPC Vulnerabilities is the problem. If you do the patch, the worm would not hurt your computer at all.  If you get rid of the worm and do not do the patch, another worm will come on to exploit the RPC.
kanary,
   We have not heard from you for awhile? Did any comment help you solve your problem? Do you have any more questions? If an Expert help you, please accept his/her answer with an excellent or good grade.

Thanks, war1
Avatar of kanary

ASKER

OOh, sorry pals.

i splitted the points b/w the comments that helped me out.

thx every body.
Glad to help!