Re: NT Authority/System

From: Jonathan Maltz [MS-MVP] (jmaltz_at_mvps.org)
Date: 10/31/03


Date: Thu, 30 Oct 2003 21:13:47 -0500

Well, I'd start by searching for the Blaster variant EXE's. Then a
web-based virus scan (from a place like www.antivirus.com )

-- 
--Jonathan Maltz [Microsoft MVP - Windows Server]
http://www.imbored.biz - A Windows Server 2003 visual, step-by-step
tutorial site :-)
Only reply by newsgroup.  If I see an email I didn't ask for, it will be
deleted without reading.
"Linda" <anonymous@discussions.microsoft.com> wrote in message
news:051701c39f53$96cd8860$a401280a@phx.gbl...
> Hi Jonathan,
>
> Well, I have downloaded and installed the patch, though
> what I find funny, is when I verified what updates have
> been successful, KB824146 is there and it was done on
> September 10th. And yes, it is the message about RPC
> being terminated. I will wait a couple of days and see if
> it happens again. Do you think I need the Blaster worm
> removal tool? It seems very complicated. Thanks again for
> all your help.
>
> >-----Original Message-----
> >Weird that AU didn't pick it up.  The exact message is
> about RPC being
> >terminated, correct?
> >
> >As I said, download and install this patch (32-bit
> version)
> >http://www.microsoft.com/technet/treeview/default.asp?
> url=/technet/security/bulletin/MS03-039.asp
> >
> >And see if it still happens
> >
> >-- 
> >--Jonathan Maltz [Microsoft MVP - Windows Server]
> >http://www.imbored.biz - A Windows Server 2003 visual,
> step-by-step
> >tutorial site :-)
> >Only reply by newsgroup.  If I see an email I didn't ask
> for, it will be
> >deleted without reading.
> >
> >
> >"Linda" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:063801c39e90$21cedc30$a401280a@phx.gbl...
> >> Hello Jonathan, Thanks for your help, question though.
> I
> >> have automatic Windows Update working almost on a daily
> >> basis these days. I also have McAfee Firewall running
> >> also. Doesn't this help any? Actually while I am
> writing
> >> this, that stupid message has come up again.
> >>
> >> >-----Original Message-----
> >> >Install:
> >> >http://www.microsoft.com/technet/treeview/default.asp?
> >> url=/technet/security/bulletin/MS03-039.asp
> >> >As soon as you can!  You are running the 32-bit
> version
> >> >
> >> >Also enable Windows XP's built in firewall:
> >> >http://support.microsoft.com/default.aspx?scid=kb;EN-
> >> US;283673
> >> >
> >> >Then go to WindowsUpdate to pick up the latest
> updates:
> >> >http://windowsupdate.microsoft.com
> >> >
> >> >More info about the worm:
> >>
> >http://securityresponse.symantec.com/avcenter/venc/data/w
> >> 32.blaster.worm.html
> >> >
> >> >-- 
> >> >--Jonathan Maltz [Microsoft MVP - Windows Server]
> >> >http://www.imbored.biz - A Windows Server 2003 visual,
> >> step-by-step
> >> >tutorial site :-)
> >> >Only reply by newsgroup.  If I see an email I didn't
> ask
> >> for, it will be
> >> >deleted without reading.
> >> >
> >> >
> >> >"Linda" <anonymous@discussions.microsoft.com> wrote in
> >> message
> >> >news:079501c39dd3$cd209230$a401280a@phx.gbl...
> >> >> I'm not sure if this is the right newsgroup. But
> every
> >> >> time I am on the internet, I get this message (about
> >> ten
> >> >> minutes into it)telling me that there was an error,
> >> send
> >> >> an error report to Microsoft or not. I have tried
> both
> >> >> ways, and I get the message that NT Authoriy/System
> is
> >> >> shutting down the system, and I can't override it.
> Is
> >> >> there something going on that I am not aware of?
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >


Relevant Pages

  • Re: Scheduled task
    ... Post it in one of the Windows newsgroups. ... Suzanne S. Barnhill ... please post all follow-ups to the newsgroup so ... >> Microsoft MVP ...
    (microsoft.public.word.docmanagement)
  • Re: Outlook Express v6 d/ls, kills msgs without reading them
    ... > You may wish to visit the Outlook Express newsgroup and repost your question: ... > Microsoft MVP ... > Get Windows XP Service Pack 2 with Advanced Security Technologies: ... > | ditch OE and go with another reader? ...
    (microsoft.public.windowsxp.general)
  • Re: Word 6.0 files
    ... please post all follow-ups to the newsgroup so ... >> WordPad is a Windows Accessory. ... >> Suzanne S. Barnhill ... >> Microsoft MVP ...
    (microsoft.public.word.docmanagement)
  • Re: Quick Launch problem
    ... You might try a new user account. ... Dave Patrick ....Please no email replies - reply in newsgroup. ... Microsoft MVP [Windows] ...
    (microsoft.public.win2000.general)
  • Re: ntfsprotect.exe
    ... Dave Patrick ....Please no email replies - reply in newsgroup. ... Microsoft MVP [Windows] ... "Steven Sinclair" wrote: ...
    (microsoft.public.win2000.general)