Pop Up Windown Appears Shutdown

[Derrick L. Smith]

I started using Outlook, after a short period of time a
pop up windown appears and message appears saying the
system will shutdown in one minute. How do I change the
time to allow me to get the necessary virus updates and
fixes from MS associated with Outlook. I did this once
before but forgot how.

Thank You,

Derrick

 

[Guest]

-----Original Message-----
I started using Outlook, after a short period of time a
pop up windown appears and message appears saying the
system will shutdown in one minute. How do I change the
time to allow me to get the necessary virus updates and
fixes from MS associated with Outlook. I did this once
before but forgot how.

Thank You,

Derrick
.

You did this once brfore? Didn't you learn anything the
first time?

 

[Tom Porterfield]

I started using Outlook, after a short period of time a
pop up windown appears and message appears saying the
system will shutdown in one minute. How do I change the
time to allow me to get the necessary virus updates and
fixes from MS associated with Outlook. I did this once
before but forgot how.

Thank You,

Derrick

More than likely it is sasser that got you this time. Visit this site
(http://www.microsoft.com/security/incident/sasser.asp) to check your PC and
remove sasser. Once that is done, make sure you follow the steps on that
page to prevent your PC from being affected again.
--
Tom Porterfield
MS-MVP MCE
http://support.telop.org

Please post all follow-ups to the newsgroup only.

 

[Jeri]

I have this same problem on two of my computers: a
desktop and a laptop. Both running Windows 2000. I have
the latest updates installed. It does sound like
SASSER. I have run the SASSER cleanup tool from two
different anti-virus products (Symantec and Panda) on
both computers.

Neither found SASSER.

I have the latest virus signatures and have run a full
virus scan on both computers. They both come up clean.
I have run AdAware and BulletProof Spy Remover. Nothing
unusual (a few items always come up, mostly cookies).

This problem only occurs if the computers are connected
to the network. Otherwise, no problems.

I have no idea what to do now.

Please help.

 

[Malke]

I started using Outlook, after a short period of time a
pop up windown appears and message appears saying the
system will shutdown in one minute. How do I change the
time to allow me to get the necessary virus updates and
fixes from MS associated with Outlook. I did this once
before but forgot how.

You either have the older MSBlaster worm and/or Sasser, and/or one of
the many variants. To stop the rebooting, go to Start>Run and enter
"shutdown -a" without the quotes. Here are links for Sasser:

http://www.sarc.com/avcenter/venc/data/w32.sasser.worm.html

Get the worm off your system and then immediately patch XP:

http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx -
TechNet bulletin with download links
http://windowsupdate.microsoft.com

Install an antivirus program and keep it updated. Install a firewall. XP
has a built-in firewall, or there are free alternatives like Zone Alarm
or Sygate.

Malke

 

[NetNut]

Just A Note: It appears that Norton 2000 will not recognize Sasser at all,
and Norton 2003/2004 MUST have the latest 'Virus Definitions' to find it. I
also recommend booting to Safe Mode to do the scan.
The NetNut

 

[Bruce Chambers]

Greetings --

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed _after_ a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH