Shutdown Initiated by NT Authority /System

Edit (5/4/04): The information below is an old topic about the Blaster worm, which shows similar symptoms to the Sasser worm that is currently spreading. If you found this in a search engine after 4/30/04 you are probably looking for help for what is probably a Sasser infection. You can find help here: Sasser Virus Help

---------------

Howdy All:

Take care all as there is another worm doing what Blaster did..

http://www.able2know.com/forums/about24107.html


There is a nasty new "hit" taking place that is affecting alot of XP systems. Got this from another site I use.. make sure your system updates, av programs and firewall is up to snuff..

To all:

This is a very hard one to figure out, only that there has been a flurry of these recently. I honestly believe it is a deliberate attack on port 139 that is being launched. This CNN Report of last week is typical of the warnings now being issued in the US: http://www.cnn.com/2003/TECH/internet/07/31/internet.atttack.ap/index.html

There is a recent hotfix that addresses this RPC vulnerability: http://www.microsoft.com/security/security_bulletins/ms03-026.asp

Install or enable a firewall immediately.
http://support.microsoft.com/?kbid=283673

Run an updated virus scan.
Or Scan for Viruses online:
http://security.symantec.com/ssc/home.asp?j=1&langid=ie&venid=sym&plfid=23&pkj=IRLFIZTYMWPAZTJWUFJ

Also be sure to update immediatly to prevert this in the future:
http://windowsupdate.microsoft.com/

This will tell you more:
http://www.microsoft.com/security/security_bulletins/ms03-026.asp

If your system is continuously restarting with this error:

Try early and often pounding of the F8 key. You want to use the "Last Known Good" configuration option.

If that does not work, I can only guess. Some anti-virus software can run from a DOS session even with NTFS disks. If yours is able to do this start there.

If no joy, do a registry replacement. This requires booting from the XP CD and hitting the first R(epair) choice you receive in order to access the Recovery Console. See this site and print out all of the instructions found there: http://www.digitalwebcast.com/2002/03_mar/tutorials/cw_boot_toot.htm

If still no joy you need to do a maintenance re-install of XP. You will not lose your data or applications but you will lose your Service Packs and Hotfixes: http://support.microsoft.com:80/support/kb/articles/q315/3/41.asp&NoWebContent=1

Murray