several people contacted me about this problem and also some PCs at work had the same problem...

if your PC shuts down every few mins coz it tells u to shut down.. ?!?
this is caused by an internet worm (does not need to be in your PC) that affects the core function of any Windows NT based PC... theres been an update out since last June, but most did'nt do anything.. so here.. pls update your PC !!!

YAHOO article (http://story.news.yahoo.com/fc?cid=34&tmpl=fc&in=Tech&cat=Computer_Viruses)

Multiple PC's across the NTL cable network (and possibly others) are being remotely shutdown by an RPC (Remote procedure call) exploit. A dialog box will pop up instructing the user that the system will shutdown in 60 seconds.

This exploit may be related to the buffer overrun vulnerability in the RPC interface that was reported some weeks ago. A patch for this is available here

Update: The attack has now escalated to dozens of isp's, i have had reports from 100's of people.

The patch link i posted earlier has been confirmed to stop the shutdown messages from appearing - but this just confirms its a buffer underrun attack, which indicates the shutdown message is not the main payload. The RPC service is crashing due to a buffer underun , which is causing the forced shutdown to occur because windows cannot function without it. Before it crashes arbitrary code is executed - i've had unconfirmed reports of trojan virus's being found after the incident.

XP Shutdown Exploit Guide

lots of people have being having problems with xp shutting down with remote shutdown exploiting from a file named msblast.exe , this can be fixed by doing the following in this little guide i put together.
http://homepage.ntlworld.com/michaelgadge/shutdownproblem.htm



get update here !!!

http://www.microsoft.com/technet/security/bulletin/MS03-026.asp


or simply do a web based windows update

ohh and please do install the SERVICE PACKS for Windows 2000 and Windows XP..
its Windows 2000 Serivce Pack 4 and Service Pack 1 for Windows XP

hehe dutch.. should have read this ey! :P hehee

Thanks for the help tisoy, it works!

BTW - should we do the procedure described here:
http://homepage.ntlworld.com/michaelgadge/shutdownproblem.htm

...or installing the patch is enough?

He He....my windows xp and my Norton is up to date every day....
so i hope no problems for me....

i heared on the tv that the virus that infected your pc will contact the microsoft server on august 16th...and uploading trash on it....and the message...
"found another hole in your system bill......dont make money..go fix the holes in your system" or something like that :big grin: :big grin: :big grin:

& this is the problem as seen (I was infected yesterday):

<img src="http://www.movie-list.com/forum/attachment.php?s=&postid=55861">

Grrrrr.... F_ _ _ing virus!!! :upset: :upset: :upset:

Thanks! I'll fix it as soon as possible. It's not my computer so I'll have to wait for my landlord to get up in the morning before I can do anything!

edit: Fixed it! :D

this is really funny :big grin: you poor win users :P

only one thing to say: "get a macintosh!!!" ;)

Originally posted by bender
this is really funny :big grin: you poor win users :P

only one thing to say: "get a macintosh!!!" ;) :upset: Wasn't funny. These damn windows updates slow my comp down untill I can only watch mega low res trailers, but without them I get a minute online, and even if I do the old "shutdown -a" thing my comp didn't work properly. then trying to reinstall the updates I'd the problem before downloading 1. Luckily I viewed the thread closer, and thanks for the wonders of Google I found the update requiered and was able to DL it properly, to update later. Now everything works again. :) Thanks for this thread Chris. I nominate it as best most usefull thread EVA!