• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 284
  • Last Modified:

How can I change the NT Authority System?

I have a computer that continues to restart.  It comes up to the desktop screen and then a popup comes up and says it will shut down in 35 seconds due to a NT error.  Im not sure why it appeared or if it is a virus.  
0
Yiper72
Asked:
Yiper72
  • 2
  • 2
  • 2
2 Solutions
 
r-kCommented:
What OS is this? If XP, what Service Pack?
Does this happen even if you unplug the network cable?
0
 
Mohammed HamadaSenior IT ConsultantCommented:
I guess this is Sasser virus, It terminates the RPC Services associated with svchost.exe in the taskmanager.

Download Hijackthis
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

After downloading is,
Install --
Run and click  "Do a system scan and save a logfile"..
Don't fix anything just attach the logfile here and we'll look into it.
0
 
r-kCommented:
If you're having trouble doing anything because of continuous restarts, do the following when that shutdown window comes up:

 Click on Start -> Run, type "shutdown -a" (without quotes) and click OK.

That should stop it from rebooting.
0
Cyber Threats to Small Businesses (Part 2)

The evolving cybersecurity landscape presents SMBs with a host of new threats to their clients, their data, and their bottom line. In part 2 of this blog series, learn three quick processes Webroot’s CISO, Gary Hayslip, recommends to help small businesses beat modern threats.

 
Yiper72Author Commented:
This is windows xp sp2.  We have been able to keep the computer from shutting down and restarting by changing the time on the computer clock.  Which then changes the timer on the shutdown clock.  This clock usually pops up about 30 seconds after start up and then gives you another minute before shutdown.  i have tried to click start, run etc and it wont do anything.  I dont have time to get the hijack this program.  So that is where I am at.  Thanks.
0
 
Mohammed HamadaSenior IT ConsultantCommented:
Goto safe mode and apply the following removal
http://www.pchell.com/virus/sasser.shtml 

If it didn't work download this and run it on safe mode as well since you cant access Normal Mode.
http://www.symantec.com/content/en/us/global/removal_tool/threat_writeups/FxSasser.exe

If all of those didn't work, Download Firewall zone alarm install it and restart..
I remember that I was able to stop the loop restarts after installing zone alarm, Note that you should be careful against what processes to allow and to deny
0
 
Yiper72Author Commented:
Here is the Hijack file.  I was able to use Shutdown-A to keep it from shutting down all the time.  I was thinking about making a batch file at startup but if I can find a fix that would be great.
hijackthis1.txt
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

  • 2
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now