shuts down

Discussion in 'Virus Information' started by framo, Aug 30, 2004.

  1. framo

    framo Guest

    my computer starts a count down and then shuts down. I
    don't know why and can't stop it from doing this
     
    framo, Aug 30, 2004
    #1
    1. Advertisements

  2. framo

    Cris Guest

    Error details...?
     
    Cris, Aug 30, 2004
    #2
    1. Advertisements

  3. framo

    Jacky Ngew Guest

    Framo, I think you got the Blaster worm

    if you see this again, try goto Start->Run and type "shutdown -a"
    this will stop the shutting down process. You can try goto
    http://www.ravantivirus.com/scan/ and get an online scan. It works
    beautifully.
    or
    gets an antivirus software with the latest virus definition. Try google AVG
    antivirus, it's free.

    Jen Ngew
     
    Jacky Ngew, Aug 30, 2004
    #3
  4. framo

    Cris Guest

    If Blaster...

    Patch availability: (several OS)
    http://www.microsoft.com/downloads/details.aspx?FamilyId=2354406C-C5B6-44AC-9532-3DE40F69C074&displaylang=en

    The definite solution in that case will be format... :-((((
     
    Cris, Aug 30, 2004
    #4
  5. Framo,

    Also, turn on auto-updates to automatically install critical updates. If
    you are running windows XP, enable the built-in firewall or download XPSP2
    which does these things for you automatically.

    Hope that helps!

    Steve Dodson [MSFT]
    MCSE, CISSP
    PSS Security

    --

    This posting is provided "AS IS" with no warranties, and confers no rights.
    Use of included script samples are subject to the terms specified at
    http://www.microsoft.com/info/cpyright.htm

    Note: For the benefit of the community-at-large, all responses to this
    message are best directed to the newsgroup/thread from which they
    originated.
    --------------------
    to
     
    Steve Dodson [MSFT], Aug 30, 2004
    #5
  6. Greetings --

    As you haven't provided any specific details or error messages,
    the following is the result of having to guess what your problem might
    be. There are at least two possibilities:

    1) If you connected the PC to the Internet without having first
    enabled a firewall, without having first installed an antivirus
    application with current virus definition files, and before installing
    the KB828471 Hotfix, you're very likely to get infected from any of
    the thousands of PCs on the Internet that are constantly broadcasting
    the Blaster and/or Welchia worms. It only takes a few seconds of
    exposure.

    To stay on-line long enough to get the necessary updates, patches,
    and removal tools, click Start > Run, and enter "shutdown -a" when the
    next RPC countdown begins. This will abort the shut down. Also, make
    sure you've enabled a firewall before starting, to preclude any more
    intrusions while getting the updates/patches/tools.

    MS04-012 Cumulative Update for Microsoft RPC-DCOM
    http://support.microsoft.com/default.aspx?scid=kb;en-us;828741

    What You Should Know About the Blaster Worm
    http://www.microsoft.com/security/incident/blast.asp

    W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
    http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

    W32.Blaster.Worm Removal Tool
    http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

    W32.Welchia.Worm a.k.a. W32/Nachi.Worm
    http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

    W32.Welchia.Worm Removal Tool
    http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

    McAfee AVERT Stinger
    http://us.mcafee.com/virusInfo/default.asp?id=stinger


    2) You've apparently contracted the latest worm, W32.Sasser.Worm,
    specifically designed to attack people who do not update their
    computers promptly and who do not practice "safe hex." In other
    words, like Blaster, this worm was developed and distributed _after_ a
    patch for the vulnerability was announced and made publicly available.
    Further, and also like Blaster, this worm could not affect any
    computer whose user had taken the basic precaution of using a properly
    configured firewall.

    To stay on-line long enough to get the necessary updates, patches,
    and removal tools, click Start > Run, and enter "shutdown -a" when the
    next Shutdown countdown begins. This will abort the shut down. Also,
    make sure you've enabled a firewall before starting, to preclude any
    more intrusions while getting the updates/patches/tools.

    What You should Know about the Sasser Worm and its Variants
    http://www.microsoft.com/security/incident/sasser.asp

    Microsoft Security Bulletin MS04-011
    http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

    W32.Sasser.Worm
    http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

    A tool is available to remove the Sasser worm variants
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

    W32.Sasser.Worm Removal Tool
    http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

    McAfee AVert Stinger Virus Removal Tool
    http://vil.nai.com/vil/stinger/


    Bruce Chambers
    --
    Help us help you:
    http://dts-l.org/goodpost.htm
    http://www.catb.org/~esr/faqs/smart-questions.html

    You can have peace. Or you can have freedom. Don't ever count on
    having both at once. - RAH
     
    Bruce Chambers, Aug 31, 2004
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.