Check out: http://support.microsoft.com/default.aspx?scid=kb;en-us;823980
Could be an RPC exploit. BTW, it's not necessary a flaw in wintel; RPC is common to all modern operating systems. Rather, than placing the blame on a company, Microsoft in this case, there needs to be more effort in teaching programmers how to avoid these things. I am a C++ programmer, and I know how difficult it can be to avoid buffer overflows if you are not paying attention to the code you are writing. Robert M. Teague Kaneohe, HI ----- Original Message ----- From: "Ross Clutterbuck" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, August 11, 2003 11:19 AM Subject: [wdvltalk] Seriously OT (sorry): Automatic shutdown issue with Windows XP > Dear all > > Forgive the massively OT nature of this post but it's always good to ask > fellow puter bods... > > Is anybody experiencing or has seen a problem with Windows XP recently > involving an automatic shutdown? My brother and a friend are both > experiencing this issue. Within minutes of Windows booting up they receive a > dialog informing them of a remote shutdown request through the Remote > Procedure Call client (RPC) from NT AUTHORITY\SYSTEM (basically it seems > like a standard remote shutdown request without the remote request!). > > I've hit various virus labs and resources for info on a RPC vulnerability or > virus which would do this and can't find anything so far. Anybody know > anything more, or have fixed it (like turning off the whole RPC subsystem :D > and throwing Windows in the bin). > > Sorry again > > Ross > > P.S. I'd appreciate it if all you Mac and UNIX/Linux users waiting until I > left before you snigger at the flaws we wintel users have to put up with... > > > > ____ . The WDVL Discussion List from WDVL.COM . ____ > To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] > Send Your Posts To: [EMAIL PROTECTED] > To set a personal password send an email to [EMAIL PROTECTED] with the words: "set WDVLTALK pw=yourpassword" in the body of the email. > To change subscription settings to the wdvltalk digest version: > http://wdvl.internet.com/WDVL/Forum/#sub > > ________________ http://www.wdvl.com _______________________ > > You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] > To unsubscribe send a blank email to %%email.unsub%% > ____ � The WDVL Discussion List from WDVL.COM � ____ To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] Send Your Posts To: [EMAIL PROTECTED] To set a personal password send an email to [EMAIL PROTECTED] with the words: "set WDVLTALK pw=yourpassword" in the body of the email. To change subscription settings to the wdvltalk digest version: http://wdvl.internet.com/WDVL/Forum/#sub ________________ http://www.wdvl.com _______________________ You are currently subscribed to wdvltalk as: [EMAIL PROTECTED] To unsubscribe send a blank email to [EMAIL PROTECTED]
