Unsolicited Computer Reboot

  • Thread starter Thread starter Mike Karr
  • Start date Start date
M

Mike Karr

My computer has started shutting down and rebooting,
quoting "NT AUTHORITY/SYSTEM" as the source, and
showing "C:\WINDOWS\system32\Isass.exe" and a status code
of 1073741819. It seems to only shut down while I am on
line. I need some help trying to resolve this issue, and
don't know whether to contact my ISP or Microsoft.
 
Apparently, your PC has suffered a major security breech and is now
infected with Malware ("The Sasser Worm") because:

1. The latest Windows XP Critical Updates have apparently not been installed......
2. The PC's firewall apparently has not been properly enabled.....
3. Out-of-date or no AntiVirus program has been installed......

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

Follow these directions to remove The Sasser Worm from your computer:
http://www3.telus.net/dandemar/sasser.htm

[Courtesy of MS-MVP Jupiter Jones]


What You Should Know About the Sasser Worm and Its Variants
http://www.microsoft.com/security/incident/sasser.asp

PSS Security Response Team Alert - Sasser Worm and Variants
http://www.microsoft.com/technet/Security/alerts/sasser.mspx

W32.Sasser.B.Worm Critical Information
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html

W32.Sasser Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

3 Steps to Help Ensure your PC is Protected
http://www.microsoft.com/security/protect/

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/security/protect/antivirus.asp

Special note if you use AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html

Consider purchasing a top-notch Internet Security program
that will help protect your PC from future viruses, hackers, and
privacy threats:
http://www.symantec.com/sabu/nis/nis_pe/

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------------


| My computer has started shutting down and rebooting,
| quoting "NT AUTHORITY/SYSTEM" as the source, and
| showing "C:\WINDOWS\system32\Isass.exe" and a status code
| of 1073741819. It seems to only shut down while I am on
| line. I need some help trying to resolve this issue, and
| don't know whether to contact my ISP or Microsoft.
 
Wow - two viruses at the same time! Perhaps you should consider antivirus
software.

Rocky
 
I'm having the same problem - using Norton Virus
protection and it indicates I'm clean with no viruses.
I'd sure like to solve this problem too!
~dave
 
You have the Blaster virus and the Sasser virus. You have also neglected to
install critical updates from Windows Update.

See here for assistance in removing the viruses (it might be a good idea to
run the online analyzer as well):
http://securityresponse.symantec.com/

After dealing with the viruses, head directly to Windows Update and install
all critical updates.

Rocky
 
Back
Top