System shutdown due to RPC terminated unexpectedly

[Hardik]

I am running Windows XP service pack 3 and just recently I started getting system shut downs after restarting. The message is that the Remote Procedure Call terminated unexpectedly and NT AUTHORITY\SYSTEM required a system shut down. Do you have how to solve this issue? Thanks for any information.

[Anywhere]

It could be a problem with some virus issue. You have to ensure that your anti-malware software is running and then download the latest virus definitions and run a full scan. Incase you dont have anti-malware software, then you will have to get one. There are many such tools to do the same like -
Kaspersky Antivirus
Panda ActiveScan

[meanjean]

Thanks for your assistance

While I was waiting for a reply, I ran Norton's Blaster Worm removal tool
(full scan in safe mode) and it didn't find the Blaster on my system.

I tried running the 2 online scans and both failed:
activescan got an error while trying to install "update error"
virusscanner got an error saying I had multiple java machines running and to
deactivate my anitivirus software, I did, but I still get the error.

I ran microsoft's malicious software removal tool, it found no malicious
software.

I have also run Norton's antivirus scan and found nothing.

(Both scans were the quick scans as my system shuts down before I can run a
full scan.)

I have changed my Norton firewall system to block the ports (incoming only)
identified in Microsoft's knowledge base regarding this worm.

I ran HijackThis's scan and no check boxes were checked.

*scratches head* Damned if I can figure out what is going on.

[Hardik]

Thanks for the information, I have scanned for the malwares and the Blaster with different softwares but they do not exist in my computer. I have also checked for the files that gives the sign of the blaster worm, but nothing is there. Also, all the virus definitions are up to date and dont detect anything on my computer.

[Manik]

Even I have the same issue on my 3 computers that are running on Windows XP SP3. It will not happen all the time and it did not start immediately after SP3 update. There doesnt seems to be any viruses on either of my 2 computers. Scans were run in offline hard drive mode using Panda, Norton , McAffee, NOD32, Bitdefender, but nothing shows up.

[Stoney]

If you want to at least stop the shut down start run cmd when in command prompt type shutdown -A you have to wait until the shutdown actually starts it may try and pop up a few times after you stop it just keep the cmd window open and do it again until it stops Hope this helps Cheers!

To stop the shutdown so you have time to fix the problem type shutdown-A from a command prompt start-run type cmd hope this helps!

[DannyUK]

Just been trying to sort a pc out with this same problem. Found that when it is starting there are about 6 svchost running in processes. If I kill the last one it seems to release the pc and lets it start up. Ran a few removal tools and scans but still not cleared this up yet and it is still shutting down.
Just wondered if anyone knew if the svhost are linked in anyway? I normally have 7 start up in another pc which runs fine. However, on the infected pc that shuts down, it takes forever to boot up until I end one of the svchost in processes.