COMPUTER SHUT DOWN

[OAKEY113]

My computer will keep shutting doen when i open it about 2 mins later it will automatically shut down NT AUTHORITY can someone please help! have i done something wrong to my computer cannot end the task. Maybe i deleted the wrong thing on Hijack this???

[liljim]

Sounds kinda like the blaster worm,you may want to run a

Are you getting a timer before the system shuts down?

[Geekgirl]

Sporadic behavior or self-booting is typical behavior from a computer with a bad power supply. If the power supply is providing power to only some devices, the computer with behave irregularly.

[teststrips]

my guess is that you've gotten yourself a virus. If you have another computer to download it with, mcafee stinger is an excellent tool to remove viruses. I say stinger because the newer viruses prevent you from running or installing the normal mcafee scan program, along with norton antivirus, etc. This makes things really difficult.

You can run stinger in safe mode (which shouldn't shut down for you), and it's small enough to fit on a floppy.

Stinger isn't a kill all program, it only knows how to search for 42 different viruses (the worst of the worse). Because it searches for 42, and there are literally 1000's viruses, i say definitely install another virus program, once you get tho the point that your computer no longer shuts down. At least run the above mentioned housecall antivirus when you are finished. There are Free options out there, such as AVAST and AVG. If you don't have the $. My personal preference is norton's antivirus. Most of the anti-virus software roundups choose it as the editor's choice, and i've never had a problem with it.

[Geekgirl]

Are you booting to the O.S and then its shutting down or is it not booting at all to the O.S. ?

[teststrips]

The NT authority message tells me that you've booted into windows, and it is being shut down through a vulnabilty in windows that ms.blaster uses. The vulnurability is fixed, but you have to install a patch in order to fix it. Check out these 3 links for other people with the same problem.







Once you get rid of blaster, GET AN ANTIVIRUS PROGRAM, think about getting a firewall if you are on a cable modem or DSL, and RUN WINDOWS UPDATE OFTEN!!!

Unfortunately with hackers and jerks who write viruses, you'll always have these types of problems if you don't take propper precautionary measures.

[dazmeister]

This is most definatly the new worm sasser. This is my advice on how to get your system up and running.

Restoring Internet connectivity and preventing the computer from shutting down In many cases, on both Windows 2000 and XP, changing the settings for the Remote Call Procedure (RPC) service may allow you to connect to the Internet to obtain downloads, and will stop the computer from shutting down.

A. Click Start > Run. (The Run dialog box appears.)

B. Type:

SERVICES.MSC /S (note the gap between .MSC /S just one space)

in the open line, and then click OK. (The Services window opens.)

C. In the right pane, locate the Remote Procedure Call (RPC) service.

CAUTION: A service named Remote Procedure Call (RPC) Locator exists. Do not confuse the two.

D. Right-click the Remote Procedure Call (RPC) service, and then click Properties.

E. Click the Recovery tab.

F. Using the drop-down lists, change First failure, Second failure, and Subsequent failures to "Restart the Service."

G. Click Apply, and then click OK.

CAUTION: Make sure that you change these settings back once you have removed the worm.

If you are running Windows XP, then disable System Restore.

CAUTION: If you are running Windows XP, we strongly recommend that you do not skip this step. The removal procedure may be unsuccessful if Windows XP System Restore is not disabled, because Windows prevents outside programs from modifying System Restore.

To turn off Windows XP System Restore

Click Start > Programs > Accessories > Windows Explorer

Right-click My Computer, and then click Properties.

Click the System Restore tab.

Check the "Turn off System Restore" box.

Click Apply.

Click yes to the following message that comes up about turning off system restore.

To remove the virus you will need to download the removal tool that can be found here

http://securityresponse.symantec.com/av ... .tool.html

before running the tool download the patch for windows by going to this link and installing it as soon as its downloaded.

http://www.microsoft.com/downloads/deta ... laylang=en

Once the patch is installed start your machine in safe mode. To do this click on your start button and click on run and type "msconfig" in the box. you will see a system configuration utility on your screen click on the "BOOT.INI" tab and in boot options click on /SAFEBOOT and click on apply. your system will ask you to restart the computer, follow the onscreen instructions to restart, once restarted log into your own account, You will notice an extra administrator account, but log in as yourself.
Then run the fxsasser tool and you should find it. once found and deleted, shut down and restart the machine then run the tool again just incase the tool missed anything.

Ok now you have to put everything back the way it was so lets get the computer started up as normal.

Click start and run then type "msconfig" find the BOOT.INI tab and unclick the /safeboot button and click apply, the system will restart them in normal mode, when you have restarted you will be greeted by a box that tells you that the configuration has changed. click on the box that says "dont show me this box again!!" That way when ever you reboot you wont be greeted with it.

Right now go back to the top and change the remote call procedure back to the way it was and put the system restore back on!

And hey presto your back up and running.

If you feel this is a little too much or need a holding hand i do offer this service professionally so if you need anything let me know and i can guide you through with what you need to do, of course there is a fee but a mans got to make a living!

Darren Foster
www.darrenfoster.net
darren@darrenfoster.net
MSN Messenger - darrenfoster1976@hotmail.com
Yahoo Messenger - darrenfoster1976@yahoo.co.uk
AIM - darrenfoster1976@aol.com
ICQ - 213-423-642

Virus Removal - PC Health Check - Online Tech Support

[brad]