Help me understand Event Viewer and Resolve issue

Discussion in 'QnA (read only)' started by Nariman, Jul 17, 2006.

Thread Status:
Not open for further replies.
  1. Nariman

    Nariman New Member

    Joined:
    Jul 24, 2004
    Messages:
    100
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Mumbai
    Am using WinXP Pro SP2.
    Require help to understand Event Manager and resolve the issue.

    Atleast once a day my system shuts down with message : This system is shuting down. Please save all work........ The shutdown was initiated by NT AUTHORITY\SYSTEM.Message
    : Windows must now restart because the Remote Procedure Call (RPC) Service terminated unexpectedly.
    On opening Event Manager I find the following ERROR :


    Eror Propereties.
    Event : Date : 7/17/2006 Source: Userenv
    Time : 2:53:39 PM. Category : None.
    Type : Error Event ID : 1090
    User : NT AUTHORITY\SYSTEM
    Computer : Home
    Description :
    Windows couldn't log the RSoP (Resultant et of Policies) session status.
    An attempt to connect to WMI failed. No more RSoP logging will be done for this

    application of policy.
    Forore information, see Help and Support Center at
    http//go.microsoft.com/fwlink/events.asp

    Can anyone of you computer buffs help me ?
    Regards
    Nariman
     
  2. kalpik

    kalpik In Pursuit of "Happyness"

    Joined:
    May 18, 2005
    Messages:
    3,002
    Likes Received:
    15
    Trophy Points:
    0
    Location:
    New Delhi
  3. serendipiti

    serendipiti New Member

    Joined:
    Sep 26, 2004
    Messages:
    101
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    asansol,West Bengal
    seems like a blaster worm infection!Had it long back..there are tools availabale on the net for its removal.Google up.
     
  4. OP
    OP
    Nariman

    Nariman New Member

    Joined:
    Jul 24, 2004
    Messages:
    100
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Mumbai
    Hi
    It is neither Sasser nor Blaster nor any otjrt work/Adware/pywre or virus. My machine is clean.
    This appears to eb a windows fault.
    Nariman

    Thanks for the site. Tried but could not delete the files in
    % SystemRoot\System32\wbem\Repository. Get message being used by someone.
    Will try later in safemode.
    Thanks oncemore.
    Nariman
     
    Last edited: Jul 17, 2006
Thread Status:
Not open for further replies.

Share This Page