Problem is solved after the following workaround
http://faculty.nmu.edu/helpdesk/blasterworm.htm.
Windows Security Update for RPC error
Rev. 08/20/03
Yesterday the HelpDesk received several calls about Windows computers shutting down with RPC errors. This is caused by an Internet worm recently identified by several antivirus web sites.
To solve the problem for NMU Leased Desktop/ThinkPad computers running Windows XP do the following steps in this order. You should do these steps even if your computer is not currently experiencing symptoms.
1. Turn Off System Restore
To turn off System Restore, follow these steps:
Click Start, then right-click My Computer, and then click Properties.
Click the System Restore tab.
Click to select the Turn off System Restore check box (or the Turn off System Restore on all drives check box), and then click OK.
Click Yes when you receive the prompt to the turn off System Restore.
2. Run/Open the Symantec W32.Welchia.Worm Fix file by clicking here. If asked for what version of Windows you have choose 32 bit.
3. Run/Open the Symantec W32.Blaster.Worm Fix file by clicking here. If asked for what version of Windows you have choose 32 bit.
4. Run/Open the Symantec SoBig.F Fix file by clicking here.
5. Run/Open the Windows Security Update by clicking here.
6. Download/Run/Open the Norton Antivirus Live Update by clicking here.
7. Turn On System Restore
To turn on System Restore, follow these steps:
Click Start, then right-click My Computer, and then click Properties.
Click the System Restore tab.
Click to clear the Turn off System Restore check box (or the Turn off System Restore on all drives check box), and then click OK.
8. Run Windows Updates now by going to Start, All Programs, Windows Update on your computer's desktop.
9. Routinely install Windows Updates as soon as they are available. You computer is already configured to get the update files as soon as they are available but you have to install them when prompted to do so.
10. If you are running a NMU Image older than the Fall 2003 image, back up your files now to CDs. Here's How. Get the Fall 2003 Image DVD from the HelpDesk and install it. You will need your files backed up before installing the image. Installing the Fall 2003 image with erase all your files. After installing the image you will need to reinstall any printers and/or software that was not a part of the image. You will need the Fall 2003 image for any additional software installed for your classes.
http://www.faqs.org/rfcs/rfc1831.html
Here is additional info about the virus from McAfee: ** MEDIUM VIRUS ALERT - 'LovSan' Worm** << OLE Object: Picture (Metafile) >>
Here is Microsoft's security patch for Windows XP that fixes this dangerous vulnerability allowing anyone to execute any program on your computer across the Internet. Here it is for Windows 2000. If you have a slower connection, you may not be able to download it before your computer shuts down. In this case, look at other options below or use another computer to download it and then copy it over and run it on your computer. Here is more info from Microsoft. You should also regularly use Windows Update.
There are several options to avoid the system shutdown:
Go to Start->Control Panel->Administrative Tools->Services->Remote Procedure Call (RPC)->Recovery Tab and choosing "Take No Action" for all three choices.
Go to Start->Run, type in shutdown/a, and press Enter.
Change the system time back by several hours.
Disconnect from the Internet.
Symantec has made available a virus removal tool (more info here).
Another removal option for more advanced users is:
1. Delete msblast.exe (usually found at c:\windows\system32\msblast.exe).
2. Delete the Windows Registry key: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\windo ws auto update" containing "msblast.exe". This is what causes the virus to start on reboot. To edit the Registry, go to Start->Run and put in "regedit".
Search 
