General discussion

Locked

NT Authority System

By shantie ·
I would like to know What NT Authority System is??? I have just removed the Blaster worm from an XP system. Connected to internet to download the patches for XP, while on Microsoft site and looking through all the downloads a message popped up saying the computer would be shut down. Message said "Remote Proceedure Call Terminated Unexpectedly by NT Authority System" Tried a couple of times and same thing. Also what is the correct security Patch to stop the XP worm as there are so many downloads, but can't stay on internet long enough to get the patches. I am sure I have removed the Blaster Worm correctly as done in Normal Windows and also in Safe Mode. Both occasions said Blaster Worm has been removed and so many files have been removed/added.
Any ideas thank you

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by ChrisDent In reply to NT Authority System

The Blaster Worm is a nasty one to remove. You can if you're quick enough kill the process that's going to shutdown the PC and stop it starting, but that depends very much on which version of the virus your computer is running as well as your own knowledgebase.

Do you have access to another PC you can download items on? It would make life a lot easier if you don't have to download on the infected PC.

This one is a link to the Blaster Worm removal tool that Symantec released:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Or you can try the Online Antivirus scanner from Trend Micro at:

http://housecall.trendmicro.com/

This one is a link to the security warning on the MS site about this exploit, it also contains links to download the relevant patches to stop re-infection:

http://www.microsoft.com/technet/security/bulletin/MS03-026.mspx

I would advise you get those two onto a CD. Then disconnect the computer from it's net connection. Run the removal tool then run the patch.

Following that I would strongly recommend you download all critical updates from:

http://windowsupdate.microsoft.com

And perhaps consider a (free) software firewall such as Zone Alarm from:

www.zonelabs.com

Finally, if you need a more permanent Antivirus scanner Grisoft offer a version that's free for home use at:

www.grisoft.com

Remember that you may well need to disable System Restore to completely remove this virus. To do that right click on My Computer and select Properties. Select the System Restore tab and click "Turn off System Restore".

Good luck!

Collapse -

by shantie In reply to

thank you for the reply. The whole problem was each time connected to net got the virus again, plus the computer also had the Welchia worm. Finally got onto Microsoft and They told me to untick the Distributed Com in My Computer Properties. Never heard of it before, so learned something else. This stops the disconnection problem. Re-ran all the virus removal tools and finally managed to download all updates for XP and Nortons. I did forget about the System Restore, but scanned hard drive twice and no viruses, so set another Restore point for that date. Thanks for the help.

Collapse -

by shantie In reply to NT Authority System

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums