unexpected shutdown

  • Thread starter Thread starter Hugh
  • Start date Start date
H

Hugh

I have a 3 month old Sony Viao with WinXP Home Ed. that
constantly shuts down with a message about NT/System
Authority shutting down. I have ran the blaster tool(s)
from Symantec, but found nothing any ideas?
 
Hugh said:
I have a 3 month old Sony Viao with WinXP Home Ed. that
constantly shuts down with a message about NT/System
Authority shutting down. I have ran the blaster tool(s)
from Symantec, but found nothing any ideas?
Click to expand...

You obviously still have blaster.

1) Disable System Restore. Turn on your Internet Connection Firewall.
http://tinyurl.com/movy
and
http://tinyurl.com/6c07

2) Download and Install All current Windows XP patches.
http://windowsupdate.microsoft.com

3) If the message pops up that you are about to shutdown, do this:
WindowsKey+R
type in: shutdown /a
click OK.
That should abort the shutdown. (No windows key? Start -> Run.)

4) Once all the patches are installed and you have rebooted, check for any
further patches by returning to the site. If no futher patches, then
continue, but patch fully, including reboots afterwards, until that web page
shows no further critical patches needed.

5) Download the latest Blaster and Welchia removal tools from symantec. Do
NOT assume you have the latest.
http://securityresponse.symantec.com/avcenter/FixBlast.exe
and
http://www.symantec.com/avcenter/FixWelch.exe

6) Run the FixBlast.exe first. Once it has ran, run the FixWelch.exe next.
Once that has ran, reboot.

7) Once you are back on, turn back on your system restore.

You can decide whether or not to leave on your ICF.
 
I think you are infected with the blaster, follow these steps quoted from
Jupiter Jones:

"DISCONNECT the subject computer from any network IMMEDIATELY.

If necessary to stop the reboot process:
Start/Run
Type "shutdown -a" ENTER

Install or enable a firewall IMMEDIATELY:
http://support.microsoft.com/?kbid=283673

VERY IMPORTANT to follow ALL steps, closing ports or installing the
patch is NOT enough.
Download the patch and regedit referenced in the article below.
You may need to do this at an uninfected computer and burn to CD or
save on floppies.
Each file is small enough to fit on a floppy.

Follow this to clean and protect your computer:
http://www.kellys-korner-xp.com/xp_qr.htm#rpc

After this is resolved prevent similar occurrences by installing ALL
Critical Updates from Windows Update.
Keep antivirus up to date and run at least weekly.
Install or enable a firewall.

See also:
http://support.microsoft.com/?kbid=826955
http://www.microsoft.com/security/incident/blast.asp"
 
Back
Top