Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hey guys, thanks for reading this..
Ive receiced a distresing error message twice today. It reads:
"This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT Authority/system"
And then counts down from a minute. This really worries me, if anyone has knowledge concerning this, please enlighten me.
Your efforts are truley appreciated.

i get that same message tooo omg its gettin on my last nerves...and also windows can read file tftp3488 and tftp3612 etc...help me

I started getting that today too.
As far as I can tell, it only happens when I am playing Never Winter Nights. That could be a coincidence, since I am playing that alot.

I too was playing a game when i got the error (both times). The game was planetside. Im sure this is only coincidental though..

Heres somthing that *may* help. Ive just downloaded it, much too early to tell if its had any effect though.
This is the link:
http://microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-026.asp
This is the thread that pointed me to the link:
http://www.techspot.com/vb/showthread.php?threadid=6651Goodluck and HELP! :(

Well, it said it would stop anyone from using the exploit.
I hope that means it will be able to stop whoever is using it now.

The message means there was an unsuccessful exploit attempt on an unpatched machine. Go to this site for more info. http://diswww.mit.edu/menelaus/security-fyi/197

I too have gotton that message! I think some hacker is doing that to me, I will update my windows immediately!

This issue can be avoided permanently with the installation of a Firewall. Two methods to do so: Buy a Router or Buy/Download a retail or free firewall software.
Internet Security information can be found on my website below by going to the INet Security Link on the navigation bar. (or use the following link -- http://rjce1.no-ip.com/security.htm )
The issue is vulnerabilities, yes, however with all ports closed by a firewall -- the issue is immediately solved unless you run some trojan horse virus program to allow and open access to your computer through the router or firewall.

I received that message last night as well (I was not playing a game). On reboot, Windows can't open file TFTP2996. I updated windows w/ the security patch. I thought all was well, but when I reviewed the Security Log under Administrative Tools, there have been NUMEROUS (over 800) Success Audits and Failure Audits in the Event Log before and AFTER I installed the patch. Users w/ names I have never before seen apparently are accessing my computer. I have also noticed that some Success Audit entries show that a new Authentication Package has been installed. My Windows XP firewall is enabled. Should i be worried that my computer has been hacked and the Windows patch doesn't have any effect?

This situation accour when we do in prompt the command shutdown -L if i'm not wrong. Check if you have any exploit or any worm installed. Maybe that is not a Windows problem.

Well, I finally figured a good way to fix the RPC problem for the time being, but as for the TFTP#### I'm completely unsure of. Go into Control Panel -> Administrative Tools -> Services.
Scroll down to Remote Call Procedure, and right click on it, and click on properties. Go to the Recovery tab and instead of setting it to reboot the PC upon the failures, set it to restart the service. Do the same with the Remote Call Procedure Locator.
You shouldn't have to worry about the computer rebooting itself anymore.

Thanks for the suggestion Vaelen, although i think "Fixing the problem for the time being"....isnt such a good idea..
I dont really know much about RPC's, but from what i gather they have to do with someone accessing your computer...turning that option off kinda just "ignores" the problem and doesnt "fix" it...I wouldnt suggest it.

DO NOT MESS WITH RPC...
Guys check this out...
http://www.computing.net/hardware/wwwboard/forum/15396.html

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |