windows nt authorises system shutdown

[michelle]

having successfully installed bt broadband and been
pleased to at last get online at home, windows throws up
an error message that goes along the lines of "windows nt
authorises system shutdown" and i watch helpless as the
system shuts down in less than 1 minute and i can only
surf for around 2 mins

HELP - VERY FRUSTRATING

Thanks

 

[Ron Lowe]

Your computer is infected with the Blaster.Worm.

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

First thing to do is to enable the Internet Connection Firewall.

Go to the Network Connections folder;
Right-click your Internet connection | Properties | Advanced tab;
Enable the option "Protect my computer and network..."

Second, we need to install the critical updates which you are missing.
Attempt to go to the windows update site and choose all of the Critical
Updates which are offered.

If the machine begins a shutdown whilst you are trying to do this,
go to a command prompt, and issue this command to cancel the pending
shutdown:

shutdown -a

Let all the critical updates install.

Thirdly, you must remove the infection:
A tool is available to remove Blaster worm and Nachi worm infections from
computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

Fourth, you should follow all the steps listed here to prevent future
problems like this:

Protect Your PC
http://www.microsoft.com/athome/security/protect/default.aspx

1) Always run a firewall, as we set up earlier.
2) Set up your machine for Automatic Updates.
3) Get an AV program installed, and keep it updated.

 

[Richard G. Harper]

Along with Ron's excellent advice, I would only add that this may not be the
Blaster worm but the Sasser worm. If the shutdown box mentions RPC then
it's Blaster, but if the shutdown box mentions LSASS then it's Sasser.

If it's LASSS disconnect from the network/Internet. From a known-clean
computer, download the following patch:

http://www.microsoft.com/downloads/...9E-DA3F-43B9-A4F1-AF243B6168F3&displaylang=en

and download this tool:

http://www.microsoft.com/downloads/...7E-1B6B-4FC3-90D4-9FA42D14CC17&displaylang=en

Apply the Sasser patch, then run the cleaning tool to get rid of the active
infection, before connecting to the Internet/network again.

Finally, whether it's Blaster or Sasser you need to re-evaluate your
patching habits and antivirus protection as both are in need of attention.

 

[Guest]

Sounds like the SASSER virus....see updates