RE: Windows Shut Down Dialog Box???
From: Jeff Brown[MSFT] (JeffBr_at_Online.Microsoft.Com)
Date: 08/14/03
- Next message: M.Elkins: "32 bit or 64 bit"
- Previous message: JKW: "Worm Virus"
- In reply to: TJ: "Windows Shut Down Dialog Box???"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 14 Aug 2003 01:06:42 GMT
TJ,
It sounds like you have the blaster virus. Refer to the following:
You can use these steps yourself if you are comfortable working in your registry:
1. Remove the infected computer from the network and reboot into Safe Mode.
2. Locate the files below, plus the Value "windows auto update" under the Run registry key and deleted them all:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete MSBLAST.EXE (all occurrences)
2a. If you are running Windows XP (any version) it is also recommended that the Internet Connection Firewall be enabled
to prevent re-infection when connecting to the internet.
2b. Reboot the machine.
3.Contact your Antivirus provider for assistance in using any removal tools they are providing or you can use one that
Symantec is providing.
Symantec's Removal tool
<http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html>.
4. If the OS continues to shut down when trying to connect to http://www.microsoft.com/technet/security/bulletin/MS03-
026.asp, with the dialog box stating the OS will be shutting down in 30 seconds.
Set the RPC Service to "Take No Action" and reboot, this should allow you to download the patch and install it.
Disclaimer:
While this may remove the worm in the short term it is advisable to backup any data and then format and reinstall the
computer. Once infected by a virus, worm or other malicious program it is not possible to verify that another program that
could compromise the system has not been left by the original infection.
Third party products mentioned in this posting are the sole responsobility of the vendor providing them and in no way
should this be considered an endoresement by Microsoft.
__
Jeff Brown
Microsoft Support Professional
MCSE
This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!
--------------------
>Content-Class: urn:content-classes:message
>From: "TJ" <webmaster@molelake.com>
>Sender: "TJ" <webmaster@molelake.com>
>Subject: Windows Shut Down Dialog Box???
>Date: Tue, 12 Aug 2003 16:00:48 -0700
>Lines: 8
>Message-ID: <07d701c36125$921c2c70$a101280a@phx.gbl>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="iso-8859-1"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
>Thread-Index: AcNhJZIcCo/faxavRkueGACGTXNtRQ==
>Newsgroups: microsoft.public.windowsxp.security_admin
>Path: cpmsftngxa06.phx.gbl
>Xref: cpmsftngxa06.phx.gbl microsoft.public.windowsxp.security_admin:73264
>NNTP-Posting-Host: TK2MSFTNGXA09 10.40.1.161
>X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>
>My windows XP Pro machine keeps giving me an error i've
>never seen before. For no apparent reason, a small dialog
>box pops up and says I have 45 seconds or so to save my
>stuff because windows needs to shut down. You can watch
>the seconds count down and it does in fact reboot your
>system. I thought my system might be dying but it's
>happening to several people I know in the last few weeks?
>Can anyone tell me why this is????
>
- Next message: M.Elkins: "32 bit or 64 bit"
- Previous message: JKW: "Worm Virus"
- In reply to: TJ: "Windows Shut Down Dialog Box???"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
