PDA

View Full Version : what does this meen and how di i fix it ?



Mr_Rain313
19-07-2005, 08:16 PM
This system is shutting down. please save all work in progress and log off.
Any unsaved changes will be lost. The shutdown was initiated by NT AUTHORITY|SYSTEM

Time befor shutdown 00.00.45

Messages
the system process
C:\WINDOWS\system32\lspss.exe
terminated unexpectedly with status code 128
the system will now shutdown and restart

it only happned once befor but im not sure what do do so plz help

Speedy Gonzales
19-07-2005, 08:25 PM
Sounds like u have the sasser/blaster worm.

If u have XP, use this and update Windows XP.

Go here http://vil.nai.com/VIL/STINGER/ and download / install/run Stinger.

Once u boot into windows again, go to start run and type in shutdown -a

Before u run Stinger.

Mr_Rain313
19-07-2005, 08:28 PM
ok thnks speedy i will try this link

Mr_Rain313
19-07-2005, 09:40 PM
thanks speedy that found it and fixed it C:\WINDOWS\system32\hwclock tobedeleted
found the W32\Sdbot.worm.gen virus !!!
C:\WINDOWS\system32\hwclock.exe tobedeleted has been deleted


So thnks heaps for that link speedy

Jen
19-07-2005, 09:59 PM
Make sure you have updated your OS with all the security patches from Microsoft to help prevent future infections. You should also have a firewall enabled. What antivirus product do you use?

Mr_Rain313
20-07-2005, 12:24 PM
i am using NIS 2003 and yeah i will update thanks for your help