Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Win XP pro


  • Please log in to reply
8 replies to this topic

#1 gonsalves

gonsalves

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Local time:07:15 PM

Posted 03 June 2005 - 10:47 AM

Hello friends, This is my first post. Excuse me if Iam not up to date. My PC is a P4 machine with dual boot,ie: Win XP Pro and 98 SE. I Use Mozilla Firefox 1.04 browser.Recently I get frequent RPC shut down when accessing the net using Xp.I have Norton2003 and Outpost(free) as firewall.I also use Trendmicro's sysclean every fortnight or whenever I suspect something is fishy.I have spybot 1.3 also loaded.All my scan results show normal. I still get this disturbing RPC shut down. I am an automation specialist and use the net a lot. This is driving me crazy. Any suggestions ?
Thanks.

BC AdBot (Login to Remove)

 


#2 pchartwell

pchartwell

  • Members
  • 145 posts
  • OFFLINE
  •  
  • Local time:04:15 PM

Posted 03 June 2005 - 11:07 AM

60 seconds to shutdown RPC message?

Next time you see this change the date on your system clock a full day forward; now you should have 24 hours to figure out what you've got. Don't change the system date until you see the warning, understand?

Possibly some BLASTER worm or variant? Be sure you have the latest Trend strings and try again. Use the Norton free online virus checker as well. Be sure you have the latest security patches from Microsoft. You didn't say but are you running SP2 for XP or not?

#3 Rimmer

Rimmer

  • Members
  • 2,159 posts
  • OFFLINE
  •  
  • Location:near Sydney, Australia
  • Local time:10:15 AM

Posted 03 June 2005 - 07:32 PM

What is the error message you see with RPC shutdown?

If it is one of these 'NT Authority 60 seconds to shutdown' messages just open a command window (start>Run>cmd) and type "shutdown -a" without quotes.

Try the Trend Micro system cleaner from here:
Trend Micro System Cleaner

Then load up your system with current, updated versions of the following:A-squared complements anti-virus software by specializing in detecting Trojans, Dialers and Spyware. It is free for private use but registration is required.
Download it from here: A-squared

Reboot your computer in Safe Mode and run the anti-virus scan and anti-spyware scans there.
If you are not sure how to boot in Safe Mode there is a tutorial here: Safe Mode

If the malware can be identified there are 'self-help' tutorials here at BC or if not then there is expert help available by submitting an HJT log to the HJT Forum.

To post an HJT log please read the pinned posts 'How to use this Forum' and 'How to post a HighJack This log' at the top of the forum:
http://www.bleepingcomputer.com/forums/Hij...alysis-f22.html

hth :thumbsup:

Edited by Rimmer, 03 June 2005 - 07:49 PM.


Soltek QBIC, Pentium 4 3.0GHz, 512MB RAM, 200GB SATA HDD, ATI Radeon 9600XT 256MB, Netgear 54Mb/s WAP, ridiculously expensive Satellite Broadband
Windows XP Home SP2, Trend Micro Internet Security, Firefox, Thunderbird, AdAwareSE, Spybot S&D, SpywareBlaster, A-squared Free, Ewido Security Suite.

#4 gonsalves

gonsalves
  • Topic Starter

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Local time:07:15 PM

Posted 04 June 2005 - 03:11 AM

One thing I forgot to mention is that I do have SP 1. I have not decided to go in for SP2 till I know how good it is. Iam using SpyBot search and Destroy latest version along with spywareblaster. As you friends have pointed out it is the same NT Authority...... I tried the tool for Blaster worm removal from Symantec but it said that my system is clean. Iam downloading " A square" now. Will keep you informed. Thanks

#5 rmm55

rmm55

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:07:15 PM

Posted 04 June 2005 - 10:46 AM

Yes, make sure Windows Updates are current, including SP2, once they are up to date and you are sure you are virus free, your RPC shutdown occurances should stop. To do WU you need to use IE, FF won't work with Windows Updates.
Roy Mel - YourTechOnline technician
roy@no_spam_yourtechonline.com (remove no_spam_)

#6 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:07:15 PM

Posted 04 June 2005 - 12:00 PM

SP2 is a CRITICAL UPDATE primarilly addressing security issues and by not loading SP2 and choosing not to allow your computer to get updates automatically you have chosen to disable your ability to get any other support for XP from Microsoft.

The word "CRITICAL" means exactly what it implies and by choosing not to make your machine SP2 compliant you made it complicit in the spread of malware over the internet.

Here are two other aps to help rid your XP system of malware:

Microsoft Antispyware Beta: (Install, update and set so it updates and runs automatically)
http://www.microsoft.com/athome/security/s...re/default.mspx

Install and run. It deletes itself when finished so you must remember to redownload it and run it every month or so:
Microsoft Malicious Software Removal Tool (Win XP and Win 2000):
http://www.microsoft.com/security/malwareremove/default.mspx

Edited by Enthusiast, 04 June 2005 - 12:01 PM.


#7 gonsalves

gonsalves
  • Topic Starter

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Local time:07:15 PM

Posted 05 June 2005 - 02:28 AM

I had installed SP 2 as soon as it was available,but it was conflicting with a Sieman's software which I use to work on automation problems. I had to format and reinstall( Siemans licence do not permit a reinstall) Win XP. Another thing is that I am loosing speed due to all the anti spyware, firewall etc. loaded on my system. Mysteriously, I have not experienced any shut downs yestrday and today(for a total of 8 hrs of browsing).Does this RPC shut down......NT authority.. occur due to any system failure?

#8 Rimmer

Rimmer

  • Members
  • 2,159 posts
  • OFFLINE
  •  
  • Location:near Sydney, Australia
  • Local time:10:15 AM

Posted 05 June 2005 - 03:51 AM

I am loosing speed due to all the anti spyware, firewall etc. loaded on my system.


Something odd there - most of the anti-spyware programs don't run in the background so there should be NO effect on system speed and as for the firewall it should be negligible effect.

Soltek QBIC, Pentium 4 3.0GHz, 512MB RAM, 200GB SATA HDD, ATI Radeon 9600XT 256MB, Netgear 54Mb/s WAP, ridiculously expensive Satellite Broadband
Windows XP Home SP2, Trend Micro Internet Security, Firefox, Thunderbird, AdAwareSE, Spybot S&D, SpywareBlaster, A-squared Free, Ewido Security Suite.

#9 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:07:15 PM

Posted 05 June 2005 - 08:30 AM

Check the Siemans site andsee how they address known issues with SP2. Most companies have by now.

Also get the support you are entitled to from Microsoft: SP2 is indeed a security update.

Microsoft Security Product Support Policy

Technical support is available from Microsoft Product Support
Services at 1-866-PC SAFETY (1-866-727-2338). There is no
charge for support calls associated with security updates.
International customers can get support from their local Microsoft
subsidiaries. Phone numbers for international support can be found
at: http://support.microsoft.com/common/international.aspx




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users