NT Authority\system

[gerardus kohlinger]

Can someone tell me why NT Authority\system is closing
down mu system every time I go online even to their own
update system.
Their message is close down on NT authority\system due to
Generis Host Process Win32 Services.

It has destroyed ery valueble material as it happened
during an upload/coffe break, since then it happens every
5 miutes after being online while for more then an year
there were no problems and no new hardware is installed
since then.

anyone with an senseble and legal answer?????

 

[Will Denny]

Hi

The following link will help you:

http://www.kellys-korner-xp.com/xp_qr.htm#rpc

Courtesy of MVP Kelly Theriot.

Will

 

[purplehaz]

You are most likely infected with a virus.



To stop the rebooting/shutdowns, right click on the task bar, choose task
manager, processes tab, look for msblast.exe. Highlight it and click end
process. Then turn on the xp firewall.

To turn on the firewall: control panel, network and internet connections,
network connections, right click your connection, properties, advanced tab,
check the protect my computer box. Do this as quickly as you can once the
desktop comes up. Then visit the sites below for the removal and patch info.

Symantec: removal info and removal tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Network associates: removal instructions
http://vil.nai.com/vil/content/v_100547.htm


Also make sure to follow the links to the Microsoft pages for the patch or
visit windows update for the patch after you remove it.


More info:

http://support.microsoft.com/?kbid=823980

 

[Nicholas]

Gerardus --

Apparently, your computer has an unwelcome visitor known
as the WM32 Blaster/Lovsan worm.

It entered your computer through your internet connection because the "firewall"
was not properly enabled and essential critical updates were not installed from
the Windows Update website. For instructions on fixing the problem, visit:

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Remove W32.MSBlast.Worm
http://www.dougknox.com/xp/scripts_desc/xp_msblast.htm

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: shutdown -a , and hit enter.

This should halt the rebooting problem.

Then immediately turn-on Windows XP's built-in Firewall:

How do I turn on the Firewall?
http://www.andyrathbone.com/tips/firewall.html


--
Nicholas

---------------------------------------------------------------------------


| Can someone tell me why NT Authority\system is closing
| down mu system every time I go online even to their own
| update system.
| Their message is close down on NT authority\system due to
| Generis Host Process Win32 Services.
|
| It has destroyed ery valueble material as it happened
| during an upload/coffe break, since then it happens every
| 5 miutes after being online while for more then an year
| there were no problems and no new hardware is installed
| since then.
|
| anyone with an senseble and legal answer?????

 

[Ken Briscoe]

anyone with an senseble and legal answer?????

Please read the other posts in this, and other pertinent newsgroups before
posting. The answer to your question has been posted numerous times. For the
record, though, you need to get rid of the virus (worm, actually) you have.
It's the Blaster worm that's been going around for the last few days. Update
your anti-virus software (you DO have anti-virus software, don't you?) and
turn on your firewall (you DO have a firewall, don't you?). Then you won't
have these kinds of problems.

KB

 

[Kathy]

I can not tell why but i do no that my computer started
doing that yesterday and i have ran scan and the
W32Blaster virus was on my computer. Where it came from
and wht Norton did not detect it before it entered i have
no idea. But my computer is very unstable noe and my
screen won't stop flichering. I have went to microsoft
and norton did all they said and my computer is still
messed up i do suggest you run the removal tool to see if
you have this virus Tho. Godd luck. If you an help me
that would be great to.

 

[purplehaz]

It came from being on the internet without using a firewall. All you need to
do is get online unsecured.
If your computer still has probs it probably from something else. I have
cleaned a few computers with the removal tool and they are just fine.

 

[Tim Slattery]

Can someone tell me why NT Authority\system is closing
down mu system every time I go online even to their own
update system.
Their message is close down on NT authority\system due to
Generis Host Process Win32 Services.

You have the Blaster worm!!

First, stop the bug from running by hitting CTRL-ALT-DELETE and
bringing up the task manager. Look for msblast.exe in the list, and
kill it. Now your computer won't shut down, but the bug is still there
and will run the next time you start your machine. Go to this URL to
find out how to get rid of it:
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

 

[purplehaz]

You might want to try start, run, type: sfc /scannow, hit enter. It will
check files and fix things. Have your xp cd handy.