Re: Automatic System Shutdown After Installing XP

Scott Wrote:
> I recently had to reinstall XP on my system, and now
> every time I get on the internet, if I am on for more
> than a few minutes, I get a message saying my sytem is
> going to shut down in 60 seconds...and there is no way
> around it. I get a message referring to the NT
> AUTHORITY...and then something about a lsass.exe error
> when I restart the system.
>
> My first thought was a virus...and I ran a full scan
> using a current version of Norton, and it came up clean.
>
> I remember having this same problem when I initially
> installed XP...and someone talked me through changing the
> recover options on a service from RESTART COMPUTER to
> TAKE NO ACTION, but I can't seem to find the right one
> now. I thought it was something to do with an RPC
> service, but changing that is not doing the trick.
>
> Anyone know what I need to do?
>
> Thanks.

This is caused by a worm W32.msblaster it has similar names it was
created by Jeffrey Lee Parson..in brief it creates a backdoor program
hich allows hackers.

W32.Blaster.Worm exploits the DCOM RPC vulnerability. This is described
in Microsoft Security Bulletin MS03-026
<http://www.microsoft.com/technet/security/bulletin/MS03-026.mspx>, and
a patch is available there. You must download and install the patch. In
many cases, you will need to do this before continuing with the removal
instructions. If you are not able to remove the infection or prevent
re-infection using the following instructions, first download and
install the patch.
Additional information, and an alternate site from which to download
the Microsoft patch is available in the Microsoft article "What You
Should Know About the Blaster Worm and Its Variants.
www.microsoft.com/security/incident/blast.mspx>."
Because of the way the worm works, it may be difficult to connect to
the Internet to obtain the patch, definitions, or removal tool before
the worm shuts down the computer. It has been reported that, for users
of Windows XP, activating the Windows XP firewall may allow you to
download and install the patch, obtain virus definitions, and run the
removal tool. This may also work with other firewalls, although this
has not been confirmed.

Live Long and Prosper

Darkhawk


--
Darkhawk