Solved

How can I change the NT Authority System?

Posted on 2008-06-16
6
267 Views
Last Modified: 2013-12-04
I have a computer that continues to restart.  It comes up to the desktop screen and then a popup comes up and says it will shut down in 35 seconds due to a NT error.  Im not sure why it appeared or if it is a virus.  
0
Comment
Question by:Yiper72
  • 2
  • 2
  • 2
6 Comments
 
LVL 32

Expert Comment

by:r-k
ID: 21795175
What OS is this? If XP, what Service Pack?
Does this happen even if you unplug the network cable?
0
 
LVL 23

Expert Comment

by:Mohammed Hamada
ID: 21795237
I guess this is Sasser virus, It terminates the RPC Services associated with svchost.exe in the taskmanager.

Download Hijackthis
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

After downloading is,
Install --
Run and click  "Do a system scan and save a logfile"..
Don't fix anything just attach the logfile here and we'll look into it.
0
 
LVL 32

Accepted Solution

by:
r-k earned 250 total points
ID: 21795290
If you're having trouble doing anything because of continuous restarts, do the following when that shutdown window comes up:

 Click on Start -> Run, type "shutdown -a" (without quotes) and click OK.

That should stop it from rebooting.
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Author Comment

by:Yiper72
ID: 21866655
This is windows xp sp2.  We have been able to keep the computer from shutting down and restarting by changing the time on the computer clock.  Which then changes the timer on the shutdown clock.  This clock usually pops up about 30 seconds after start up and then gives you another minute before shutdown.  i have tried to click start, run etc and it wont do anything.  I dont have time to get the hijack this program.  So that is where I am at.  Thanks.
0
 
LVL 23

Assisted Solution

by:Mohammed Hamada
Mohammed Hamada earned 250 total points
ID: 21867200
Goto safe mode and apply the following removal
http://www.pchell.com/virus/sasser.shtml 

If it didn't work download this and run it on safe mode as well since you cant access Normal Mode.
http://www.symantec.com/content/en/us/global/removal_tool/threat_writeups/FxSasser.exe

If all of those didn't work, Download Firewall zone alarm install it and restart..
I remember that I was able to stop the loop restarts after installing zone alarm, Note that you should be careful against what processes to allow and to deny
0
 

Author Comment

by:Yiper72
ID: 21926956
Here is the Hijack file.  I was able to use Shutdown-A to keep it from shutting down all the time.  I was thinking about making a batch file at startup but if I can find a fix that would be great.
hijackthis1.txt
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
Provide an easy one stop to quickly get the relevant information on common asked question on Ransomware in Expert Exchange.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question