Discussion Locked

cut off

0 helpful
9 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello.
problem,) when iam on the internet after 15minutes i get a message,(INITIATED SHUTDOWN BY NT AUTORITY/SYSTEM) The pc shuts down and then
restarts its self.iam using .xp
thanks in advance

9 replies

by shiny_topadm

W32.Blaster.Worm infection!!

That is a variant of the message produced by a system infected with this 'worm' or a related one. Please use a reputable AV solution and repair this now, then apply the patches for "XP" that are needed. Any AV solution provider will have a removal tool, follow their instructions and good luck.

by jschein

he is correct...

goto: http://vil.nai.com/vil/stinger/

(remove any spaces) Fre removal tool from mcafee... save to floppy or hard drive... boot into safe mode, run this program.

Do windows update, update to latest patches, run program one more time.

by dmiles

a patch is available at http://microsoft.com/technet/treevi...in/MS03-026.asp Pick your OS... and download. (cross your fingers, you've only got 59 seconds to get this. If you've got 2000 (please say you do) it is only 900 k, and will take about five minutes. ****! that won't work. There is a way to disable the virus (or at least the shutdown) but I don't recall what it is... or how to do it.

I could probably handle it in the registry, but as I don't have an NT computer, or the virus to play with... I don't know where it stores the launch data.

However, programs are told to launch from the following locations
If you are desperate, just delete everything from those keys. (it shouldn't kill your PC... but you may be out a driver or two and some programs you have set to startup won't start anymore... that is the least of your worries, though.)

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr
entVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr
entVersion\RunServices
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre
ntVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre
ntVersion\RunServices

by valis

blaster worm, yadda yadda, only the most widely reported on virus in history...

This discussion is closed to new replies.