Re: HELP PLEASE

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Ken Blake (kblake_at_this.is.an.invalid.domain)
Date: 01/14/05 

Date: Fri, 14 Jan 2005 14:54:10 -0700

In news:12BE5997-7356-4F37-AD37-A515F35758A4@microsoft.com,
Pinto1uk <Pinto1uk@discussions.microsoft.com> typed:

> Hi, my friend's computer starts but when it gets to the log on
> screen, i get the following message:
>
> "This system is shutting down. Please save all work in progress
> and
> log off. Any unsaved changes will be lost. This shutdown was
> initiated by NT AUTHORITY SYSTEM. The system process
> c:\windows\system32\services.exe terminated unexpectently with
> status
> code 1073741819. The system will now shutdown and restart."
>
> It has got further then this once, where i logged it etc, but
> it ages
> for anything to load. and whenever i did anything (eg open my
> computer, it took 10 mins. The internet connection is also
> unplugged.
> It has xp installed with sp2 (but not sure if the firewall is
> enabled
> etc).

He is infected with Blaster or Sasser, which he got by running
without a firewall. There's lots of information on how to proceed
available on the internet. Do a Google search on both those names
for more info. 

-- 
Ken Blake - Microsoft MVP Windows: Shell/User
Please reply to the newsgroup

Relevant Pages

  • Re: THE SYSTEM KEEP SHUTTIND DOWN
    ... Are you getting this messages before the reboot? ... "This system is shutting down. ... Please save all work in progress and log ... This shutdown was initiated by NT Authority/System." ...
    (microsoft.public.windowsxp.security_admin)
  • LSA shell
    ... "This system is shutting down. ... progress and log off. ... This shutdown was initiated by NT AUTHORITY\SYSTEM ... a dial up connection. ...
    (microsoft.public.windowsxp.security_admin)
  • Shutdown initiated by system?
    ... "This system is shutting down. ... progress and log off. ... Any unsaved changes will be lost. ... This shutdown was initiated by NT Autority\SYSTEM. ...
    (microsoft.public.security.virus)
  • errors
    ... keep getting this system is shutting down please save all ... work in progress this shutdown was inieated by NT ... connected to net,also computer running slow ...
    (microsoft.public.windowsxp.messenger)
  • Blaster worm virus
    ... Whenever your computer attempts to shutdown or reboot, ... "Windows must restart because the Remote Procedure Call ... Turn on your Internet Connection Firewall ...
    (microsoft.public.windowsxp.security_admin)