shutting down..

  • Thread starter Thread starter Kathy
  • Start date Start date
K

Kathy

I have toshiba notebook. I've had it about one month.
When I am using Internet, the system has been shutting
down few times. There was some message about NT Authority
# system.. I don't know why is this happened.
 
Blaster worm.
Print this message and follow the instructions.

Download the FixBlast.exe file from:

http://securityresponse.symantec.com/avcenter/FixBlast.exe

Save the file to a convenient location, such as your downloads folder
or the Windows Desktop (or removable media that is known to be
uninfected, if possible).
To check the authenticity of the digital signature, refer to the
section, "Digital signature."
Close all the running programs before running the tool.
If you are running Windows XP, then disable System Restore. Refer to
the section, "System Restore option in Windows Me/XP," for additional
details.

CAUTION: If you are running Windows XP, we strongly recommend that you
do not skip this step. The removal procedure may be unsuccessful if
Windows XP System Restore is not disabled, because Windows prevents
outside programs from modifying System Restore.

Double-click the FixBlast.exe file to start the removal tool.
Click Start to begin the process, and then allow the tool to run.

Note: If, when running the tool, you see a message that the tool was
not able to remove one or more files, run the tool in Safe mode. Shut
down the computer, turn off the power, and wait 30 seconds. Restart
the computer in Safe mode and then run the tool again. All the Windows
32-bit operating systems, except Windows NT, can be restarted in Safe
mode. For instructions, read the document "How to start the computer
in Safe Mode."

Restart the computer.
Run the removal tool again to ensure that the system is clean.
If you are running Windows XP, then re-enable System Restore.
Update your anti-virus software.
 
Hi Kathy,

Your system is infected by RPC (W32.Blaster) Worm. This is causing the
system to shutdown abnormally.

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.rem
oval.tool.html

MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution
http://support.microsoft.com/?kbid=823980

MS-MVP Kelly Theriot's Repair Solution:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability:
http://www.sarc.com/avcenter/security/Content/8205.html

http://www.updatexp.com/msblast-exe.html

http://www.eeye.com/html/Research/Advisories/AL20030811.html

http://aumha.org/win5/a/blaster.htm

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

~ Please reply to newsgroup ~


I have toshiba notebook. I've had it about one month.
When I am using Internet, the system has been shutting
down few times. There was some message about NT Authority
# system.. I don't know why is this happened.
 
It appears your computer has been infected with the Blaster virus. For more
information and how to fix this please see follow this link:

http://www.microsoft.com/security/incident/blast.asp

http://www.microsoft.com/security/protect/main.asp


Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
Content-Class: urn:content-classes:message
From: "Kathy" <[email protected]>
Sender: "Kathy" <[email protected]>
Subject: shutting down..
Date: Mon, 10 Nov 2003 23:06:21 -0800
Lines: 5
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
Thread-Index: AcOoIk+V2apIzU4KSD6eZh1PPVyurQ==
Newsgroups: microsoft.public.windowsxp.newusers
Path: cpmsftngxa06.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.windowsxp.newusers:95387
NNTP-Posting-Host: TK2MSFTNGXA09 10.40.1.161
X-Tomcat-NG: microsoft.public.windowsxp.newusers

I have toshiba notebook. I've had it about one month.
When I am using Internet, the system has been shutting
down few times. There was some message about NT Authority
# system.. I don't know why is this happened.
 
Back
Top