NT AUTHORITY\SYSTEM

  • Thread starter Thread starter MANUEL ALVIREZ
  • Start date Start date
M

MANUEL ALVIREZ

IN MY COMPUTER APPEARS A WINDOW WITH A MESSAGE "NT
AUTHORITY\SYSTEM" AND MUST SHOT DOWN, AND RESTARTS MY
COMPUTER AND GIVES ME ONE MINUTE TO SAVE MY FILES AND
THEN MY COMPUTER SHOTS DOWN.

WHAT DO I DO?

MANUEL
 
You have the Blaster Worm virus.

Go to Control Panel > Network Connections > Right cick on
your dial up and go to the Advanced tab and click 'Protect
my Computer', this will stop the countdown from appearing.
Go online and type in this URL:
http://securityresponse.symantec.com/avcenter/FixBlast.exe
and follow the instructions.

It's been over 8 months since ths virus has been around
and still PC stores are not patching XP systems, it's
ridiculous.
 
Greetings --

First of all, please unstick your CapsLock key. Posting in all
caps, as you have done, is the Usenet equivalent of shouting, and is
considered very rude. More importantly, posting in all caps makes the
post very hard to read, further reducing your chances of getting help.

If you connected the PC to the Internet without having first
enabled a firewall, without having first installed an antivirus
application with current virus definition files, and before installing
the KB824146 Hotfix, you're very likely to get infected from any of
the thousands of PCs on the Internet that are constantly broadcasting
the Blaster and/or Welchia worms. It only takes a few seconds of
exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Back
Top