60 sec shutdown

  • Thread starter Thread starter vickery
  • Start date Start date
V

vickery

for the past three weeks I have tried everything, possible
I think!!. The problem is every time I connect to the
internet after 5 minutes it brings up a windows message
saying it is shuting down. the code is something like this

C:/windows/system32/lassa.exe and it has something to do
with the (RPC) , I have gone into the settings and changed
it to take no action but it still brings this error up,
also I have run the blaster removal tool and the new one
out no and it has found anything, and have also run
another internet account and it does not bring up this
error message. any ideas on how to fix this, bt have told
everyting is ok at there end?????
 
Hello
The Sasser Worm has been spreading like wildfire.
http://www.microsoft.com/security/incident/sasser.asp

Be sure to visit MS Windows Update site and download the updates this is for
your security and safety.

http://v4.windowsupdate.microsoft.com/en/default.asp



The thing most people do not know is that after they buy a computer with
virus protection installed they have to go in and register and download the
updates and continue to update it or set it to auto update then after a
period of time the subscription will run out usually in 90-180 days at that
time they will have to purchase new protection either online or from a
retail store and at that time they will be able to update for a period of
365 days (1 year).


--
Hope This Helps
Haus
Not a MS-MVP
Not a MVP
Not nothing, just a good ole boy.
 
yes I have updated this and ran the removal tool for
sasser, and has found nothing but it stills shut down.
cheers anyway for helping
lee
 
Greetings --

You post is very unclear as to the _exact_ wording of the Shutdown
alert. It does make a difference.

Either it's:

If you connected the PC to the Internet without having first
enabled a firewall, without having first installed an antivirus
application with current virus definition files, and before installing
the KB824146 Hotfix, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

MS04-012 Cumulative Update for Microsoft RPC-DCOM
http://support.microsoft.com/default.aspx?scid=kb;en-us;828741

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger

Or it's:

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed _after_ a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Back
Top