This has been posted at various places but may as well post it here since there appear to be multiple threads with people having this problem. If you are getting the restarting after 60 seconds when connected to the Internet, here's how to stop the problem (without a firewall):
1. Go to TASK MANAGER, click on the PROCESSES tab, and find MSBLAST.EXE under the Image Name column. Highlight it and click END PROCESS.
2. Open Windows Explorer and browse to C:\WINDOWS\system32, (where C: is the HD with WinXP). Under that directory locate MSBLAST.EXE and delete it.
3.Go to Start, click run, and type in REGEDIT to open the Registry Editor. Once there, find the following key:
There you will see a value named "windows auto update" ... right-click it and delete it.
The worm should be completely gone now... this is what I did on my home PC's and both have been fine for several hours.
You should still install the patch from MS in addition to doing this, of course. Downloading a firewall if you don't already have one wouldn't hurt either
Remote procedure call service terminated unexpectedly
this shut down was authorized by NT authority system
because yesterday afternoon i got this message a bunch of times, i managed to get all the updates from ms and it stopped. Since the updates were installed i havent had this message once and its been more than a day. Should I still go through what you described above? or just leave it alone?
thanks i already did it. I am wondering if I installed the patch though, because i just did a scan for updates and installed all the critical and recommended ones. After i read your post and went through deleting the msblast in all the areas, i ran the windows update again and it couldnt find any other updates for me so i am assuming i have it.