Re: NT Authority / System Shutdown

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: wojo (kwoyach[SPAM)
Date: 04/05/04


Date: Mon, 05 Apr 2004 06:16:23 GMT


"ali hussain" <aliabbas38@hotmail.com> wrote in message
news:A6FF8DAD-AF2D-44C3-88EF-A5B264975F3E@microsoft.com...
> this is simple such is the problem in xp. no single antivirus scan this
> virus named lovascan this simple u follow that click on the start then on
> control panel then on the performance and maintanance then on
> administrative tools then on the services in the services find the remote
> procedure call the all options isn the list r alphabatically arranges
> simply follow r in the list then remote procedure call double click on
> that then a window open then on this window click the third on top click
> on the recovery tab that is third one on this u make all three failures on
> the command take no action then click ok u will never get this message
> from nt authority and enjoy using yr computer

Sure that's a great idea if you want to continue running your computer with
the Blaster Virus on it, otherwise it is a RIDICULOUS idea.
Here's a better plan:
First click Start | Run
In the dialog box type shutdown -a to abort the shutdown then

To stop the RPC error so it doesn't interupt you while your making repairs:
Start | Run | services.msc /s
Scroll down to "Remote Proceedure Call (RPC)" NOT (RPC) Locator
Right click and select properties
Under the "Recovery" Tab change all failures from "Restart the Computer" to
"Restart the Service"
This will keep the RPC from coming up.

Disable msblast.exe in task manager.
Ctrl+Alt+Del | Processes | Right click msblast.exe and click "End Process"

Download the Blaster Security Patch at:
http://www.microsoft.com/security/incident/blast.asp

Download AdAware & Spybot S & D:
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/

Disconnect from the internet

Run AdAware & Spybot
Run the Security Patch you downloaed earlier.

Make sure you have a firewall and AV software enabled and updated.
As long as you downloded and ran the patch above Blaster shouldn't come back
but there are plenty of others that can find your computer in minutes.

Change the RPC back to "Restart the Computer" the same as you did above.

Reconnect to the Internet and download the rest of the Microsoft Update
Security Patches.

-- 
kwoyach[SPAM]@yahoo[SPAM].com
TO Email: Remove [SPAM]
If I can help you I will.
If you can help me thanks.
-- 
**Useful Links**
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp


Relevant Pages

  • Re: RPC terminated Unexpectedly, shutdown in 60 seconds
    ... First let me say your roommate needs to go to a store and BUY Windows XP. ... Scroll down to "Remote Proceedure Call (RPC)" NOT Locator ... Download AdAware & Spybot S & D: ... Run the Security Patch you downloaed earlier. ...
    (microsoft.public.windowsxp.general)
  • Re: Remote Call Procedure
    ... Never mind the "other than a virus" ... Scroll down to "Remote Proceedure Call (RPC)" NOT Locator ... Download AdAware & Spybot S & D: ...
    (microsoft.public.windowsxp.basics)
  • Re: System Shutdown: NT AuthoritySystem
    ... Scroll down to "Remote Proceedure Call (RPC)" NOT Locator ... Download AdAware & Spybot S & D: ...
    (microsoft.public.windowsxp.general)
  • Re: BSOD Kernel_data_inpage_error win32k.sys
    ... >>> Have you already run AdAware and Spybot? ... >>> Blaster Security Patch: ... >>>>> Reconnect to the Internet and download the rest of the Microsoft ...
    (microsoft.public.windowsxp.general)
  • Re: System Shutdown when downloading files
    ... You connected to the internet w/o first installing a firewall and AV ... Scroll down to "Remote Proceedure Call (RPC)" NOT Locator ... Download AdAware & Spybot S & D: ...
    (microsoft.public.windowsxp.general)