Shutdown Timer

anonymous_at_discussions.microsoft.com
Date: 05/04/04


Date: Tue, 4 May 2004 04:13:17 -0700

Possibly blaster &/or sasser worm. Blaster info first
sasser second
BLASTER
Your computer is now infected with the W32.Blaster.Worm or
one of its variants. This happened because you have not
been using an internet connection firewall and have
apparently neglected to install the critical updates
available at the Windows Update website.
-----------------------------------------------------------
-------
If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.
-----------------------------------------------------------
-------
Then immediately turn-on Windows XP's built-in Firewall:
http://www.microsoft.com/security/protect/
(To enable the built-in firewall, go to:
Control Panel, double-click Networking and Internet
Connections, then click Network Connections. Right-click
your connection, then
Click Properties, and on the Advanced tab, click the option
"Protect my computer and network..." Note: the built in
firewall only monitors incoming traffic not outgoing (ie
spyware, trojans, etc.. you may have on your system).)

Special note if you use AOL:
America Online installs its own connection settings that
override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows
XP's
built-in firewall.

What You Should Know About the Blaster Worm and Its
Variants
http://www.microsoft.com/security/incident/blast.asp

A tool is available to remove Blaster worm and Nachi worm
infections from computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

A security issue has been identified that could allow an
attacker to
remotely compromise a computer running Microsoft Windows
and
gain complete control over it. You can help protect your
computer
by installing this update from Microsoft.
http://www.microsoft.com/downloads/details.aspx?
FamilyId=2354406C-C5B6-44AC-9532-
3DE40F69C074&displaylang=en

Above courtesy of MVP Carey
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
 
***Install a good firewall. ZoneAlarm is a free one you
can install.
Install a good anti-virus program making sure you keep
it's definitions up to date! ***
- - - - - - - - - - - - -
Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

Protect Your PC
http://www.microsoft.com/security/protect/default.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm
.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm
.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32
.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm
.removal.tool.html
=======================================================
SASSER
You've been infected by the Sasser worm.
This means you didn't apply Windows Update (patch for this
came out April 13) and don't have a firewall enabled.
If you can't stop your computer from restarting:
As soon as your computer reboots and Windows loads, click
Start >> Run.
In the box, type the following: shutdown -a
Then see
http://www.microsoft.com/security/incident/sasser.asp and
http://www.microsoft.com/technet/security/bulletin/MS04-
011.mspx
Removal tools:
   http://vil.nai.com/vil/stinger/
   
http://securityresponse.symantec.com/avcenter/venc/data/w32
.sasser.worm.html
   
http://securityresponse.symantec.com/avcenter/venc/data/w32
.sasser.b.worm.html
Enable your XP firewall (or get a third party one if not
on XP or even if so - www.zonealarm.com has a free one,
also nortons internet security package has a firewall,
antivirus, popup blocker and more) and run Windows Update
regularly.
***You also need good antivirus software and keep it
updated regularly. ***
Run your windows update regularly!!
What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-
011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.
html

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32
.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/

>-----Original Message-----
>I started using Outlook for the first time in a while.
>After a few minutes after looking at my email I get the
>pop up windown and it says the system will shutdown in
one
>minute. I believe I have some type of virus associated
>with Outlook, but I am unable to run my Virus protected
or
>get updates due to the time before shutdown. Once before
I
>was able to change the shutdown time to allow me to get
>updates from my virus protection and MS. Could anyone
>instruct me how to do this again.
>
>Thank You,
>
>Derrick L. Smith
>mbdlsmith@att.net or dsmith@tqtx.com
>.
>



Relevant Pages

  • Re: XP rebooting
    ... Problem with both of these fixes obviously - I CAN'T GET INTO WINDOWS. ... > and your computer has been infected by the Sasser worm, ... disconnect from the Internet: ... > Step 5: Enable a Firewall ...
    (microsoft.public.security.virus)
  • System Shutdown error message every time I boot
    ... proper security measures and updates on your system. ... Then immediately turn-on Windows XP's built-in Firewall: ... What You Should Know About the Blaster Worm and Its ...
    (microsoft.public.windowsxp.perform_maintain)
  • shutdown
    ... Then immediately turn-on Windows XP's built-in Firewall: ... What You Should Know About the Blaster Worm and Its ... ***Install a good firewall. ...
    (microsoft.public.windowsxp.newusers)
  • Re: GAOBOT Worm reinfecting computers
    ... >> The GAOBOT worm which has been infecting and reinfecting computers. ... Networkwide internet firewall or individual ... > networked, has every machine on the network been checked including laptops ... windows xp workstations and we have windows 2000 windows 2003 servers ...
    (microsoft.public.security)
  • Re: Remote Procedure Call Stops Internet Browsing
    ... You have the MSBlaster worm. ... Find an entry called "Windows Auto Update" on the right side. ... Make sure you're running a firewall that prevents worms like ... Control Panel, double-click Networking and Internet Connections, ...
    (microsoft.public.windowsxp.general)