[thepit56]

I restarted my computer after uninstalling and reinstalling my antivirus (pc tools antivirus) and when I booted up I got the error message

"This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT Authority/system.
Message: Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly."

I went to this website to fix it and have followed the directions on the site http://kb.wisc.edu/helpdesk/page.php?id=2048 apparently windows was already patched when I tried to patch it so I skipped that step and i am scanning with the symantec w32.blaster.worm fix tool right now.

what I want to know is how this happened and how to prevent it next time.

thanks for any and all help.

 

[elf]

If your computer was already patched, it should not have gotten the worm...Worms have a tendency to crawl around the web installing itself on people's unprotected computers. We don't offer security advice in the Microsoft forums, we actually have a security section specifically for this type of situation.

Look over the First Steps at Removing Malware . Make a note of any steps you cannot complete, and post that information, along with any required logs in the HijackThis Log Help section.

Please be patient as our security team recieves a lot of logs every day. If you do not recieve a response after 24 hours, you can post again to bump it back to the front page.

 

[thepit56]

the thing is I don't know if I have the aforementioned worm or not, I just think I do. it could very well be windows just being finnicky like it always is. that is why I posted here.

further confirming my confusion as to whether it is a worm or not is that I scanned it once (uncorrectly according to the instructions) and there was no worm found, if this is the case I believe the best course of action would be to use the windows disk (I have one) to reinstall windows (without wiping the harddrive)

I am putting this on the forums becuase I hope I am helping some poor soul who has the same problem as me but doesn't know how to go about fixing it. peace.

 

[jcgriff2]

I suggest that you follow elf's advice and proceed to our Security Center - HiJackThis Log Help Forum and follow the 5 steps as outlined. Then and only then will you be able to ascertain if in fact your system is under attack.

A simple "repair" of Windows does not necessarily guarantee freedom from such.

Regards. . .

jcgriff2