system shutdown

ok i'm not sure if this is where i should be posting this but.... i run windows xp and i have gotten this message several times and would like to know if anyone can tell me what it means exactly ....

this system is shutting down. please save all work in progress and log off. any unsaved changes will be lost. this shutdown was initiated by NT AUTHORITY\SYSTEM


time before shutdown : then it counts down the seconds

message
windows must now restart because the remote procedure call (rpc) service terminated unexpectedly.


i'm not sure why it did this.
thank you for your help

I have the same problem. Now when I restart my computer it doesn't load correctly, I only get the wallpaper image and the mouse cursor, but nothing to click on. I tried using the windows CDs, but the choices I get (reinstalling windoes or repairing windows don't help). When I choose repairing I get the DOS mode but I don't have any idea what do do.
The only possibility to do anything is using the windows task manager. With it I treid resetting windows to an earlier date, but that doesn't solve the problem at all. I checked my computer with Norton Antivirus, but it couldn't detect any viruses.

Do you know ho I can solve the problem without having to format my drive and reinstall windows?

Hi

Try this to see if it helps.

It might be a Task Scheduler which invokes a shutdown command. Disable it.

1. Click Start > Programs > Accessories > System Tools > Task Scheduler
Scheduled Tasks
2. Look for each job and locate which one is for shutdown (shutdown.exe)

Right-click a job and choose properties to know which .exe it is.

RPC definition
(Remote Procedure Call) A programming interface that
allows one program to use the services of another program
in a remote machine. The calling program sends a message
and data to the remote program, which is executed, and
results are passed back to the calling program.

That didn't work.

Firstly I can't click start because it isn't there, there's nothing on the screen except the wallpaper.

Secondly I don't have a task scheduler apparently. Of course I couldn't get to it with start because start isn't there. A friend told me I could find it in the windows folder and that the folder is named "task". Bu the bizarre thing is that I don't have that folder in my windows folder although my friend has it.

Thirdly I tried to reinstall windows, but that doesn't work. I get the message that windows can't be installed because of a conflict with a programme that hasn't been completely installed. Theproblem is that windows doesn't tell me what programme it is and a second problem is that I haven't installed any programmes for over a week and that till yesterday windows worked fine.

This is an issue that Microsoft has recognized. I was getting the same error and installed this patch and haven’t had a problem since.

Not sure it’ll fix the other issues you have, but it will fix the RPC.

RPC Interface

Lance

OK, but should I download the 32 bit or 64 bit package?

Hi

I stand corrected here but I think if it's XP HE then we only have the 32Bit. The fact that we have to decide should confirm that it's 32bit!

Read about 64Bit Here and you will see why I have stated the above ;)

Yesman, if you're getting the Command Prompt then it means you've gone into the Recovery Console. What you need to do is to go past that option by pressing Enter, as if you're doing a clean install, then you'll be given the option to "Repair an existing installation". That's the Repair oprtion you need. You'll need to reinstall SP1, Windows Updates & any unsigned drivers afterwards.

I think some nasty is doing the rounds, see this thread:

http://discussions.virtualdr.com/sho...609#post690609

Hi, I am having the same problem. It happens every time when my system has been running for about 10 mins. Driving me crazy!
I have tried running the above patch, but it will not install. I get the following message "setup got not verify the integrity of the file update.inf. Make sure the cryptographic service is running on this computer"
Pleasseee, I hope someone has a solution to this re boot problem.
Many thanks,
Richard

I got the same message while trying to install the update. But there's more. Before the nt authority message shows up there are other messages:

1) Generic host process for win32 has found a problem
2) ntvdm (or something like that).exe could not be executed.

The different patches don't work.

And I can't reinstall windows from the DOS mode as the F8 button doesn't work although all others button work

It doesn't work?
Most that I've dealt with today, have had success with this one?

I have a small pc shop and I've had 3 people call in today with this same error message. I have downloaded the patch that Daisy shows and hopefully will fix the problem for them. They are all on broadband, not dial up, and all running XP. One pc had spybot but the other two scanned clean. Hope this helps!

Keep in mind the w32.blaster.worm

My sister in laws pc was having this problem and now has the msblast worm.

Hi Ryder276
Did she fix her problem with the patch?

Yes it did,thank you!

That's GREAT news! Thanks for posting back. :D

My PC began showing the RPC shutdown last night so when I'm back on it I'll run the MS patch andFixBlast to see if that cures it. I'll let you know the outcome. Thanks to all for the postings and links. Great stuff.
John

Hi all,
We are of course talking about the w32.blaster.worm. So far, its widely reported to shutdown many pc's all over the world. Downloading the patch from MS may solve the problem, but I believe the virus will still sit on the computer. Here is a link to the symantec removal tool.

YPants,

The download from THIS site worked for me. Attempted downloads and install from other sites gave me verification errors.

That's exactly what it was - W32.Blaster.Worm. Tool from Symantec detected and cleaned. Thanks for the heads up.

Hi all, many thanks for all the solutions offered. But I myself, am still having problems.
After reading all the posts, and the symnatec page, I for sure have the worm in question on my PC.
I have downloaded and executed fixblast, but it finds nothing, I have tried running it in safe mode as they suggest, but still nothing!
I can not install any patches from microsoft, as i get an error as already mentioned, even the link sent from the kind fellow a few posts above this one.
I cant run a full norton virus scan, because my pc shuts itself down before it's complete.
Pleassee, I am literally pulling my hair out here.
Many many thanks all

YPants, See Verlux's instructions (2 replies) at the link below.

http://discussions.virtualdr.com/sho...hreadid=143673

HTH
Tufenuf

I too have been exposed to the delightful msblast.exe worm, and after much digging I downloaded the Stinger virus scan and it detected the worm and deleted it. I am very pleased at this, but it seems as though it left my computer in shambles. For starters the taskbar is frozen and wont respond; it will not install the patches for the same reasons as mentioned before, and now the internet has quit working on that computer, although I have it on network with another computer who's internet is up and running. System Restore is not working, nor are many other applications. It wont let me pull up the properties control on most applications. I'm not sure how to get it goin again...although I'm fairly confident the worm is gone.

Moose7667 - did you disable system restore before you deleted the worm? I have cleaned it off 6 pc's today and applied the patch and everything is working good.

The System Restore has been enabled the entire process. When I manually try to start it an error message comes up saying 'System Restore could not protect your computer. Restart your computer and try again.' And of course it just repeats this when you do. This is not the only problem I'm experiencing, but the computer did cease restarting even before the worm was deleted.

You MUST disable system restore before you run the virus tool fix. It won't work otherwise. You disable it by right clicking on my computer and go to the tab that says System Restore and check the box to disable. You must then restart. I found I had less problems if I restarted in Safe Mode and ran the virus tool then. Good luck. Hope this helps.

I was able to disable system restore, but even in safe mode the patch would not install. However, the internet is running again, but the connected hardware devices such as webcam, speakers, and microphone are not working. I'm thinking it may be a 'bootleg' copy of windows xp and it's not accepting the update, but I'm not really sure. I'm out of ideas.

OK, I downloaded the patch from Microsoft for Win XP home edition. That worked great, now my computer doesn't keep shutting down. I then downloaded FIXBLAST, disabled the system restore and ran the program. In the middle it said it could not continue, sorry for the inconvience. So I booted in safe mode, same error. Fixblast would not complete. So I downloaded my Mcafee updates and it found the virus. It asked me to delete the file msblast.exe and replace it with a good one. So I said delete. Then it told me it could not delete the file, I did not have access to the media. It also found a TFTP file and the same thing happened. I only have two user profiles on my computer and it does not ask me to sign in as the administrator so I do not know how to access these files. Where do I find good files to replace them with. I am an XP newbie as my computer came installed with XP. Can you help? :confused:

Please see above post!

ratsten, Press your Alt/Ctrl/Del keys down at the same time and the Task Manager should appear. Under the Processes tab if you see msblast.exe click it to hilite it then click End Process. Do the same thing for the TFTB and if it's there press End Process. Now find those files and you should be able to delete them.

HTH
Tufenuf

Edited to add: Also see robertw's last response of the thread at this link.

http://discussions.virtualdr.com/sho...hreadid=143760

I hit crt/alt/del and looked at the processes running. There is no MSbalst.exe or TFTP exe's running...any more suggestions?