NT AUTHORITY

  • Thread starter Thread starter Temitope
  • Start date Start date
T

Temitope

I keep getting a message from Win XP when I'm online for
about 10 minutes, to the effect that NT/AUTHORITY/SYSTEM
etc... and system will shut down in 1 minute. It always
shut down. Why? What can I do? It makes use of online
conten sooooo annoying and I cant get to finish my work
on the web. My internet connection is new. Pls respond
quickly
 
I keep getting a message from Win XP when I'm online for
about 10 minutes, to the effect that NT/AUTHORITY/SYSTEM
etc... and system will shut down in 1 minute. It always
shut down. Why? What can I do? It makes use of online
conten sooooo annoying and I cant get to finish my work
on the web. My internet connection is new. Pls respond
quickly
Click to expand...

Apparently, your computer is now infected with the Sasser Worm or one of its
variants. This happened because you have not been using an internet connection
firewall and have apparently neglected to install the critical updates available
from Microsoft.

If your computer is constantly attempting to shutdown or reboot:
Start - Run, type "shutdown -a", and hit Enter.
That should halt the reboot. Now fix the problem.

Immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

What you need to know about the Sasser worm:
http://www.microsoft.com/security/incident/sasser.asp
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html
http://www3.telus.net/dandemar/sasser.htm

"Get Help with Security and Virus-related Issues"
"Get free help by phone: 1 (866) 727-2338 (Toll free; US and Canada only)"
http://www.microsoft.com/security/protect/support.asp

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
I keep getting a message from Win XP when I'm online for
about 10 minutes, to the effect that NT/AUTHORITY/SYSTEM
etc... and system will shut down in 1 minute. It always
shut down. Why? What can I do? It makes use of online
conten sooooo annoying and I cant get to finish my work
on the web. My internet connection is new. Pls respond
quickly
Click to expand...

DOHH. Wrong worm. Blaster is STILL out there?!

Apparently, your computer is now infected with the W32.Blaster.Worm or one of
its variants. This happened because you have not been using an internet
connection firewall and have apparently neglected to install the critical
updates available from Microsoft.

If your computer is constantly attempting to shutdown or reboot:
Start - Run, type "shutdown -a", and hit Enter.
That should halt the reboot. Now fix the problem.

Immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/

Download and install Security patch KB824146:
http://support.microsoft.com/?kbid=824146

What you need to know about the Blaster Worm:
<http://www.microsoft.com/security/incident/blast.asp>
http://support.microsoft.com/?id=826955
<http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html>

And about the Nachi / Welchia worm:
http://support.microsoft.com/?id=826234
<http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html>

Download and run the Blaster and Welchia worm removal tool (Windows 2K/XP):
<http://support.microsoft.com/default.aspx?scid=833330>

"Get Help with Security and Virus-related Issues"
"Get free help by phone: 1 (866) 727-2338 (Toll free; US and Canada only)"
http://www.microsoft.com/security/protect/support.asp

And please don't contribute to the spread and success of email address mining
viruses and worms. Learn to munge your email address properly, to keep yourself
a bit safer when posting to open forums. Protect yourself and the rest of the
internet - read this article.
http://www.mailmsg.com/SPAM_munging.htm

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Nope, possibly right worm. Both Blaster and Sasser can do this.

And yes, both are still out there. Install a fresh 2K/XP box and connect it
to the internet via dialup or broadband with no firewall. Wait five minutes
or less. Should be infected by then with one or both. :-(
 
"Richard G. said:
Nope, possibly right worm. Both Blaster and Sasser can do this.

And yes, both are still out there. Install a fresh 2K/XP box and connect it
to the internet via dialup or broadband with no firewall. Wait five minutes
or less. Should be infected by then with one or both. :-(
Click to expand...

Right on, Richard. I once saw Blaster crawl in via an un-firewalled
dial-up within 5 seconds of connecting to the Internet. The modem
lights flashed, and the error message about NT Authority popped up.

It's even worse, though: those worms can get into XP ** during **
installation if the computer's connected to the Internet via
broadband, before you have a chance to install or activate a firewall.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
Back
Top