Re: NT Authority - 60 second shut down: Not a Blaster or a Sasser

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance




"Jerid B" <JeridB@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:94123599-3FF7-427C-A893-76E6E0973F5C@xxxxxxxxxxxxxxxx
Hello,
Windows XP SP2 and everything single fix available.
When I log in locally, network, user, or admin I get this pop up of NT
Authority and restarting due to RPC.
I ran Symantec Blaster and Sasser fixes and it came up with nothing. I ran
McAfee and AVG and that came up with nothing.
I went to Services and try to stop RPC or check the properties and it won't
let me do anything. A good 10 processes aren't starting (including Windows
Firewall). When I go to start the firewall it stops and the NT Authority
comes up.
I ahve been using the "shutdown -a" to stop it, but scans are coming up blank.
HELP PLEASE!

You could try going into safe mode and into services and disabling messenger service. I think that is the one which is linked to RPC (remote procedure call). This is not the same as windows messenger or msn messenger.
Sounds like you have some kind of nasty going on which the antivirus is not detecting. First ensure that the antivirus programs are up to date. You can also try a free scan at http://housecall.antivirus.com (this is a one time only scan and is not to be substituted for real time AV).
You could also try a scan with Spybot Search and Destroy, this may pick up some spyware nested in your machine.

.



Relevant Pages

  • [NEWS] Buffer Overrun In RPCSS Service Could Allow Code Execution
    ... Remote Procedure Call (RPC) is a protocol used by the Windows operating ... There are three newly identified vulnerabilities in the part of RPCSS ... Service that deals with RPC messages for DCOM activation- ...
    (Securiteam)
  • Re: Critical Errors after a pristine install of OS
    ... this program from my system at next install, i'll find other ways to chat ... I just hope that messenger won't be ... You do not have to update before turning on the Windows XP firewall.. ... Messenger Service, it may indicate that your system is not secure. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Critical Errors after a pristine install of OS
    ... the firewall is on by default. ... about messenger, i'm so spooked right now that i prefer to ... completely delete this program from my system at next install, ... You do not have to update before turning on the Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Pop Up Ads on StartUp
    ... I also tried what you suggested about Windows Messenger but even with all ... It looks like you have the Elite Toolbar malware on your ... > to use HijackThis. ...
    (microsoft.public.windowsxp.general)
  • Re: Critical Errors after a pristine install of OS
    ... Installation of Zonealarm will automatically turn off Windows firewall, ... I just hope that messenger won't be ... reinstalled when i install SP2 or something, ...
    (microsoft.public.windowsxp.security_admin)