Sudden shutdown

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

My computer is behaving strage nowadays, its giving me this message as soon as i log on--"this shut down was initiade by NT authorit system"....pls help
 
Hi,

When the shutdown warning appears, click start/run and enter "shutdown -a"
to halt the process. It's a virus called blaster or lovesan. Information:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc
http://www.pchell.com/virus/msblast.shtml
http://vil.nai.com/vil/content/v_100499.htm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html
http://www.bigblackglasses.com/Article.aspx?Article=342

You need the patch described here to protect against it:

MS03-039: A Buffer Overrun in RPCSS Could Allow an Attacker to Run Malicious
Programs
http://support.microsoft.com/?kbid=824146

Problem is, you needed to install the patch BEFORE you got infected to avoid
it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone



Redman said:
My computer is behaving strage nowadays, its giving me this message as
Click to expand...
soon as i log on--"this shut down was initiade by NT authorit system"....pls
help
 
Hi Redman,

You had the worm, check the information, and especially, enable either
XP's firewall or a third-party one, like zone alarm from
www.zonealarm.com before you surf the Net.

Blaster Worm FAQ:
http://www.microsoft.com/security/incident/blast_faq.asp

833330 A tool is available to remove Blaster worm and Nachi worm
infections
http://support.microsoft.com/?id=833330

Blaster Worm Security Bulletin:
http://www.microsoft.com/security/incident/blast.asp

826955 Virus Alert About the Blaster Worm and Its Variants
http://support.microsoft.com/?id=826955

826234 Virus Alert About the Nachi Worm
http://support.microsoft.com/?id=826234

MORE ON SECURITY:

Three steps you can take to improve your computer's security:
http://www.microsoft.com/security/protect/

321050 Description of a Personal Firewall
http://support.microsoft.com/?id=321050


Good luck, hope this helps.
 
Back
Top