Ok, user is showing symptoms similar to blaster. She is getting the NT AUTHORITY message and her PC is shutting itself off. Yes her system was unpatched.
So yesterday I ran STINGER on her PC but it found nothing? I patched her system anyway and then ran Microsofts removal tool. She said the message appears only in the morning time. By afternoon it is gone. Anyone have any ideas? The STINGER tool is supposed to remove blaster and sasser..... looks like it didnt work