Windows XP Shutdown/Restart Problem

[Guest]

I am getting the following errox box and messages after XP boots up and my desktop is displayed
(I can boot up in safe mode OK, but cannot use system restore or other system tools)
My system restarts after 60 seconds no what I do.
- -
System Shoutdown:
This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be lost
This shutdown was initiated by NT AUTHORITY\SYSTEM. Time before shutdown 00:00:6
Windows must restart because WINDOWS\SYSTEM32\lsass.exe terminated with status code 128
- -
I have run my current virus scan software and find no viruses. I thought it was maybe the blaster virus
Can anyone tell me what is wrong and how to fix this

 

[Carey Frisch [MVP]]

There are thousands of nasty computer viruses/worms looking for unprotected
computers. Your computer can be infected within a few milliseconds the moment
an internet connection is established if your computer is not properly secured.

Apparently, your computer is now infected with the W32.Blaster.Worm or one of its variants.
This happened because you have not been using an internet connection firewall and have
apparently neglected to install the critical updates available at the Windows Update website.

------------------------------------------------------------------

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

------------------------------------------------------------------

Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

Special note if you use AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm infections from computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

MS03-039: A Buffer Overrun in RPCSS Could Allow
an Attacker to Run Malicious Programs
http://support.microsoft.com/default.aspx?kbid=824146

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

----------------------------------------------------------------------------------------------------------


|I am getting the following errox box and messages after XP boots up and my desktop is displayed.
| (I can boot up in safe mode OK, but cannot use system restore or other system tools)
| My system restarts after 60 seconds no what I do.
| - - -
| System Shoutdown:
| This system is shutting down. Please save all work in progress and log off. Any unsaved changes will be
lost.
| This shutdown was initiated by NT AUTHORITY\SYSTEM. Time before shutdown 00:00:60
| Windows must restart because WINDOWS\SYSTEM32\lsass.exe terminated with status code 128.
| - - -
| I have run my current virus scan software and find no viruses. I thought it was maybe the blaster virus.
| Can anyone tell me what is wrong and how to fix this?
|

 

[roger]

Hi,

No, it won't solve the problem permanently. You need to download the
appropriate patches from Windows Update, more importantly, you need to
turn on Windows XP's firewall or use a third-party one like Zone Alarm
at www.zonealarm.com

Blaster Worm FAQ:
http://www.microsoft.com/security/incident/blast_faq.asp

833330 A tool is available to remove Blaster worm and Nachi worm
infections
http://support.microsoft.com/?id=833330

Blaster Worm Security Bulletin:
http://www.microsoft.com/security/incident/blast.asp

826955 Virus Alert About the Blaster Worm and Its Variants
http://support.microsoft.com/?id=826955

826234 Virus Alert About the Nachi Worm
http://support.microsoft.com/?id=826234

MORE ON SECURITY:

Three steps you can take to improve your computer's security:
http://www.microsoft.com/security/protect/

321050 Description of a Personal Firewall
http://support.microsoft.com/?id=321050

Good luck

 

[Guest]

Roger
Thanks for the info. I really appreciate it
I cannot get on to the internet because windows cannot find my modem (??
(or my printer right now) so can I download from another computer and apply it
Thanks again
-Bill

 

[roger]

Hi Bill,

Roger,
Thanks for the info. I really appreciate it.
I cannot get on to the internet because windows cannot find my modem (??)
(or my printer right now) so can I download from another computer and apply it?
Thanks again.
-Bill

Thanks for the feedback.
Yes, you can download the patch to another computer, and then apply it
to the infected computer:
http://www.microsoft.com/security/security_bulletins/ms03-039.asp

Also download the tool to delete the worm:
833330 A tool is available to remove Blaster worm and Nachi worm
infections
http://support.microsoft.com/?id=833330

Once you've gotten rid of the worm and applied the update, you need to
enable XP's firewall. Go to Networks, right-click on your connection,
go to properties, to the advanced options tab, and click on 'protect
my computer...'

With the computer updated and running a firewall, you will be
protected.

Don't forget to also run a virus scan using your Antivirus and its
updated definitions, and also a scan looking for malware using
ad-aware and spyboot, both free:
Download, install and update:
Ad-aware
http://www.lavasoftusa.com/support/download/

Spybot S&D
http://www.safer-networking.org/index.php?lang=en&page=download


Good luck