system restart authorized by windows nt/authority

[Guest]

When I am on the internet, my computer always seems to display a message, something like 'the system must restart authorized by windows nt/authority. How can i fix this? I dont know what else to do

 

[Will Denny]

Hi

Your system has been infected by the Blaster Worm. Have a look at the following links:

www.kellys-korner-xp.com/xp_qr.htm#rpc

Courtesy of MVP Kelly Theriot.

"Virus Alert About the Blaster Worm and Its Variants"
http://support.microsoft.com/?id=826955

"What You Should Know About the Blaster Worm and Its Variants"
http://www.microsoft.com/security/incident/blast.asp

--

Will Denny
MS-MVP Windows - Shell/User


| When I am on the internet, my computer always seems to display a message, something like 'the system must restart authorized by windows nt/authority. How can i fix this? I dont know what else to do

 

[Chuck]

When I am on the internet, my computer always seems to display a message, something like 'the system must restart authorized by windows nt/authority. How can i fix this? I dont know what else to do

Tim,

Apparently, your computer is now infected with the W32.Blaster.Worm or one of
its variants. This happened because you have not been using an internet
connection firewall and have apparently neglected to install the critical
updates available from Microsoft.

If your computer is constantly attempting to shutdown or reboot:
Start - Run, type "shutdown -a", and hit Enter.
That should halt the reboot. Now fix the problem.

Immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

Download and install Security patch KB824146:
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm:
<http://www.microsoft.com/security/incident/blast.asp>
http://support.microsoft.com/?id=826955
<http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html>

And about the Nachi / Welchia worm:
http://support.microsoft.com/?id=826234
<http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html>

Download and run the Blaster and Welchia worm removal tool (Windows 2K/XP):
<http://support.microsoft.com/default.aspx?scid=833330>

A security issue has been identified that could allow an attacker to
remotely compromise a computer running Microsoft Windows and
gain complete control over it. You can help protect your computer
by installing this update from Microsoft.
http://www.microsoft.com/downloads/...6C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

And Tim, please don't contribute to the spread of email address mining viruses.
Learn to munge your email address properly, to keep yourself a bit safer when
posting to open forums. Protect yourself and the rest of the internet - never
post your address unmunged.
http://www.mailmsg.com/SPAM_munging.htm

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Bruce Chambers]

Greetings --

If you connected the PC to the Internet without having first
enabled a firewall, without having first installed an antivirus
application with current virus definition files, and before installing
the KB824146 Hotfix, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

MS04-012 Cumulative Update for Microsoft RPC-DCOM
http://support.microsoft.com/default.aspx?scid=kb;en-us;828741

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH