General discussion

Locked

Windows 2000 server shudown

By mahender_onlyone ·
hi all, i m in problem , we have windows 2k server
that gives an error that "the system is going to shutdwon within 60 seconds, save your work and logo off, initiated by windows nt authority ,and
the process is by c:\windows\system32\lsass.exe"
i think my server is infected by some worm or virus. we are getting this error in all xp prof. system too.
plz help

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Toivo Talikka In reply to Windows 2000 server shudo ...

This sounds like the Blaster worm. You need to source anti virus software and clean all the machines. It would be best to disconnect them from the network first - check for more details from Microsoft:

http://www.microsoft.com/security/incident/blast.mspx

You can get a removal tool for example from F-Secure:

http://www.f-secure.com/v-descs/msblast.shtml
and their removal tool ftp://ftp.f-secure.com/anti-virus/tools/f-lovsan.zip

or Symantec:

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

Collapse -

by josh In reply to Windows 2000 server shudo ...

Possibility of three viruses/worms if that is problem. Blaster, Welchia, or Sasser. Update your Server @ www.windowsupdate.com and all your XP machines...If you get the error while getting the updates then go to Start>run>shutdown -a within the 60 secs. and you will be able to cancel the shutdown...Get a AV (I recommend CA eTrust AV) update, and run scans on all your machines with system restore off and in safe mode.
Post back with more info as far as AV and updates are concerned!

Back to Windows Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums