Please help. 60 second shutdown

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello. I have a Win 2000 machine that after or upon
bootup, receive an error about NT admin and a 60 second
timer counts down and reboots over and over. I looked
through this website on this other pc, and saw some
comments about the RUN command "shutdown -a", but when
entered, it says this is not a recognized command or
batch file (etc) and thus the timer is not terminated. Is
that command only a WinXp command? BTW, this is for my
brother's machine. He has never done any critical updates
nor service packs. It is a WIn 2000 SP1. Any help? TIA
-Dean
 
Hello. I have a Win 2000 machine that after or upon
bootup, receive an error about NT admin and a 60 second
timer counts down and reboots over and over. I looked
through this website on this other pc, and saw some
comments about the RUN command "shutdown -a", but when
entered, it says this is not a recognized command or
batch file (etc) and thus the timer is not terminated. Is
that command only a WinXp command? BTW, this is for my
brother's machine. He has never done any critical updates
nor service packs. It is a WIn 2000 SP1. Any help? TIA
-Dean
Click to expand...

Highly likely a Blaster Infection.

You will need to remove the virus. Install a software/hardware firewall then
patch the machine. Without the firewall you will just get re-infected.
 
-----Original Message-----



Highly likely a Blaster Infection.

You will need to remove the virus. Install a
Click to expand...
software/hardware firewall then
patch the machine. Without the firewall you will just get re-infected.


.
Click to expand...

Thank you. I understand the need for protection. As soon
as he went online, he was infected (it took less than 3
minutes!). He did not know the value of anit-
virus/spyware/malware/etc and other protections including
the Win critical updates until now. He always said it
took too long--which they can on a dial-up (which he
had) , but now has ethernet dsl.

You think it's ther BLASTER though?--OK, thank you for
responding.
-Dean
 
Wow. SP1?

Anyhow, try booting into safe mode to see if it will stop the offending process long
enough to implement repairs such as installing antivirus on it and/or removing the
entry in the registry run or run once folders as shown with msconfig or autoruns
which is free from SysIntenals. You could also try downloading McAffe Stinger which
will remove many common viruses and will fit on a floppy disk. If you can identify
the process, executeable, or virus name going to http://www.sarc.com/ and searching
for info will give you more info on what it is and what to do. Of course the computer
needs to have a firewall, new service pack, and have all critical updates installed.
If you are fast, right after logon run services.msc in the run box, find the remote
procedure call service and set the recovery tab to "restart the service" for failures
and hit apply. -- Steve

http://vil.nai.com/vil/stinger/
http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml
http://www.microsoft.com/athome/security/protect/default.aspx
 
Dean said:
software/hardware firewall then

Thank you. I understand the need for protection. As soon
as he went online, he was infected (it took less than 3
minutes!). He did not know the value of anit-
virus/spyware/malware/etc and other protections including
the Win critical updates until now. He always said it
took too long--which they can on a dial-up (which he
had) , but now has ethernet dsl.

You think it's ther BLASTER though?--OK, thank you for
responding.
-Dean
Click to expand...

There are other viri that show these symptoms, however Blaster is by far the
most popular RPC exploit.

If your behind an Ethernet ADSL modem, these are usually firewalls too. What
make is your Ethernet modem, what configuration, how's it all connected up?
 
Back
Top