Windows xp professional

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I loaded Windows xp professional over Windows 98. The load seemed
successful, as everything was functionally properly.

After connected to the internet, a microsoft warning screen came up after a
couple of minutes, saying the system was going to shut down. "This shutdown
was initiated by NT Authority System".

It if means anything, the status code was "1073741819"

Again, this only takes place when I log onto to the internet.

As a note, when I installed XP, the process automatically logs onto the
internet, and microsoft, to register....it did, and accordingly, was
successful.

Any thoughts?
 
koolz said:
After connected to the internet, a microsoft warning screen came up
after a couple of minutes, saying the system was going to shut down.
"This shutdown was initiated by NT Authority System".
Click to expand...

Do you have a firewall? And/or did you install all updates (including SP2)
before connecting to the internet? If not you may have been infected with
some worm.
 
Install a firewall...


--
Tumppi
Reply to group
=================================================
Most learned on nntp://news.mircosoft.com
Helsinki, Finland (remove _NOSPAM)
(translations from FI/SE not always accurate)
=================================================
 
Install and activate a firewall and then:

Your system is infected by the MSBlaster Worm. This is causing the system to
shutdown abnormally.

From Ron Martel

Do steps 1 and 2 on your working computer.

1. Get the Blaster removal script from MVP Kelly Theriot's web site:
http://www.kellys-korner-xp.com/regs_edits/msblast.vbs
2. Get the Microsoft patch from
http://support.microsoft.com/default.aspx?scid=kb;en-us;823980#WinXP

Copy the downloaded files to a 3.5 inch diskette (they will both fit
on the same 1.44 mb diskette) or burn them to a CD

3. Disconnect the infected computer from the Internet. Unplug
Cable/DSL modem if you have one. That prevents reinfection during the
time interval between running the script and the completion of the
patch installation.
4. Run the script.
5. Install the patch.
6. Activate the Internet Connection Firewall in Windows XP
7. Reconnect to the Internet. Update your antivirus software and do
a complete scan.
8. Go to the Windows Update and get all repeat all of the critical
updates for your computer.

Good luck

Ron Martell Duncan B.C. Canada

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/
 
koolz said:
I loaded Windows xp professional over Windows 98. The load seemed
successful, as everything was functionally properly.

After connected to the internet, a microsoft warning screen came up after a
couple of minutes, saying the system was going to shut down. "This shutdown
was initiated by NT Authority System".

It if means anything, the status code was "1073741819"

Again, this only takes place when I log onto to the internet.

As a note, when I installed XP, the process automatically logs onto the
internet, and microsoft, to register....it did, and accordingly, was
successful.

Any thoughts?
Click to expand...


You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed _after_ a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next Shutdown countdown begins. This will abort the shut down. Also,
make sure you've enabled a firewall before starting, to preclude any
more intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/



--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH
 
Back
Top