RPC & getting booted offline

[SoSl0w]

I built a cheapy computer for my girlfriend for christmas. It has windows XP pro and is a little 2.0 celeron. I recently acquired a modem for the computer but the stupid computer keeps booting her offline. She uses MSN which works fine on another computer in the house. When she connects using this computer she gets a 52kps connection, after about a minute it throws an error and says that it has to shut down(and does). I am not sure about the exact error but this is what I could get from on the phone.

RPC Remote Procedure Call error
Initiated by NT authority system

Can anyone shed some light as to what an RPC is or an NT authority?
Anyone know any possible fixes?

I suggested she get the latest downloads but it cannot stay online long enough to download anything. I appreciate any help you can give.
Thanks

[ChoaticWhisper]

I just had that problem found out that it was the msblast virus.
Check Here for a fix

[I2n0ld]

u got a virus, prolly the ms blast. http://www.faqs.org/rfcs/rfc1831.html
find some info on that site.
DL removal tool here http://securityresponse.symantec.com...val.tool.html.

[SoSl0w]

I really do appreciate your help. I just did a search on google and was getting the same answers you just relayed. This sucks.
Thanks again,
Greg

[SoSl0w]

UPDATE:

Well I downloaded 3 things to remove the blaster virus. The first one I used was a 300Kb removal program. The next was a 1.4 meg patch I guess. The third was another patch. The problem I am having now is, is that it will stay online for about 10 minutes then it will boot. Did I not install the patches correctly? I read through the articles above but I was unsuccessful at removing the virus manually, that is why I tried the patches. When removing the part in the "registry editor" the window would close before allowing me to get to the folder containing the "startup programs". Is that caused by the virus? Anyone have a definite fix or patch that they have used personally?

Also Internet explorer will try to open a generic search page even though it is not set as the homepage. I think it was called www.incredafind.com but I am not 100% sure. What would cause this?

[SoSl0w]

TTT.....Anyone?

[I2n0ld]

did u ran the removal program? did it clean it? run patch after cleaning it?
the removal program should have caught it and clean it.
regarding the explorer i am not sure but i think u have spyware.do u have spybot or adware to clean up spywares. get it here http://www.lavasoftusa.com/software/adaware/
http://www.safer-networking.org/index.php?page=news

also u might want to update ure virus scanner, and go to microsoft site n download all patches.

[Holland_Hounddog]

Hello everyone. Newbie forum member here. I'm mainly here to learn from all the great advice given out by the veterens, but I believe I may be of some assisstance here.

I had this exact same problem on my Wxp Home computer late last year.

If you turn on Internet Explorers imbedded firewall it should prevent your computer from restarting. This should give you time to rid your PC of the virus and patch XP accordingly. In fact, I'm surprised you were able to get online and download the patch/fix tool without getting booted (that is if your firewall is turned off).

If your firewall is already turned on, then I'm not sure.

Make sure you take note of the system restore section of the fix as well.

[Jeordiewhite]

Well system restore may and may not take care of it, it may have a back up even.
The cleaner should help, or try another removal tool for any of the other ms blaster varients.
The patch issued out by microsoft wasn't a complete fix, it was just a patch to stop the problem with one of the virus's.
Also your virus scanner should be able to take care of the virus now as well if you have a decent one that has the deffinitions updated.
Make sure you are using the firewall as mentioned above, that is the problem, it is usually stopped by the microsofts built in firewall.

[paul9]

if you click on start>run then type command into the box that pops up, you will open up a command prompt (dos box)
into this box, type shutdown /a and your computer will not shutdown, giving you enough time to download patches.