Re: windows nt authorises system shutdown

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Ron Lowe (ron-msng_at_{d.e.l.e.t.e.}lowe-family.me.uk)
Date: 07/21/04


Date: Wed, 21 Jul 2004 11:37:07 +0100

Your computer is infected with the Blaster.Worm.

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

First thing to do is to enable the Internet Connection Firewall.

Go to the Network Connections folder;
Right-click your Internet connection | Properties | Advanced tab;
Enable the option "Protect my computer and network..."

Second, we need to install the critical updates which you are missing.
Attempt to go to the windows update site and choose all of the Critical
Updates which are offered.

If the machine begins a shutdown whilst you are trying to do this,
go to a command prompt, and issue this command to cancel the pending
shutdown:

   shutdown -a

Let all the critical updates install.

Thirdly, you must remove the infection:
A tool is available to remove Blaster worm and Nachi worm infections from
computers
that are running Windows 2000 or Windows XP
http://support.microsoft.com/?kbid=833330

Fourth, you should follow all the steps listed here to prevent future
problems like this:

Protect Your PC
http://www.microsoft.com/athome/security/protect/default.aspx

1) Always run a firewall, as we set up earlier.
2) Set up your machine for Automatic Updates.
3) Get an AV program installed, and keep it updated.

-- 
Best Regards,
Ron Lowe
MS-MVP Windows Networking


Relevant Pages

  • Re: xp virus
    ... prevent infection from the SASSER or BLASTER worm would have been on your ... install all Critical Updates. ... variant of the SASSER worm. ...
    (microsoft.public.windowsxp.perform_maintain)
  • LoveSan Virus
    ... "Windows must restart because the Remote Procedure Call ... Turn on your Internet Connection Firewall ... and then click Network Connections. ... You can also configure Automatic Updates to automatically ...
    (microsoft.public.windowsxp.security_admin)
  • RE: blaster fix
    ... "Windows must restart because the Remote Procedure Call ... your system and install the patch mentioned above. ... Turn on your Internet Connection Firewall ... You can also configure Automatic Updates to automatically ...
    (microsoft.public.windowsxp.security_admin)
  • Restarts even after fixing blast
    ... "Windows must restart because the Remote Procedure Call ... your system and install the patch mentioned above. ... Turn on your Internet Connection Firewall ... You can also configure Automatic Updates to automatically ...
    (microsoft.public.windowsxp.security_admin)
  • RE: msblast
    ... "Windows must restart because the Remote Procedure Call service ... Turn on your Internet Connection Firewall ... Go to Windows Update and get all other needed Critical Updates ... and then click Network Connections. ...
    (microsoft.public.windowsxp.security_admin)