deedub777 Posted March 23, 2007 Report Share Posted March 23, 2007 Hi one and all,Forgive me if I get some of the terminology wrong here, total newbie ...I have just purchased a couple of machines (from my old company) and have hit a little problem. Both machines are Windows XP Pro SP2 and have been connected to a 2003 server domain.I go in and take the PC off the domain (by selecting workgroup MSHOME). It prompts me for the domain account, no problem, did that OK but here comes the problem.Occasionally, I get a services error message and a warning that NT AUTHORITY SYSTEM is shutting down the system in 60 secs :0 I know that I can stop this by using the shutdown -a command but then the PC runs really slowly.I assume the domain details are hidden elsewhere and are causing this?? Can anyone please advise me what to do.I have two other machines on the same workgroup and they are fine but are running XP home.Really appreciated, thanks. Quote Link to comment Share on other sites More sharing options...
-pops- Posted March 23, 2007 Report Share Posted March 23, 2007 You have a virus which can be removed by using Stinger click hereYou need to have anti-virus software installed to prevent this reoccurring. Quote Link to comment Share on other sites More sharing options...
deedub777 Posted March 23, 2007 Author Report Share Posted March 23, 2007 You have a virus which can be removed by using Stinger click hereYou need to have anti-virus software installed to prevent this reoccurring.Thanks for this. Both machines have been protected by AV software throughout the time they have been connected to the internet. The current AV is McAfee and has not picked up the problem. The stinger page you referred me to has a link about disabling system restore but the link is dead, can you point me to a method for this?Thaks for your fast response...Oh, and the link to download stinger doen't work Quote Link to comment Share on other sites More sharing options...
-pops- Posted March 23, 2007 Report Share Posted March 23, 2007 The link for Stinger works for me.To disable System Restore: open Help & Support, click on System Restore then on System Restore settings. You will be able to turn off from there. Remember to turn on again when you have completed the clean up. It is important to turn SR off before virus cleaning as otherwise, the virus will remain behind. This applies to all viruses.Note: is your Windows installation up to date with all the security measures issued by Microsoft? I ask this because the viruses that usually cause the NT Authority shutdown should be taken care of by Windows itself now. Quote Link to comment Share on other sites More sharing options...
deedub777 Posted March 23, 2007 Author Report Share Posted March 23, 2007 The link for Stinger works for me.To disable System Restore: open Help & Support, click on System Restore then on System Restore settings. You will be able to turn off from there. Remember to turn on again when you have completed the clean up. It is important to turn SR off before virus cleaning as otherwise, the virus will remain behind. This applies to all viruses.Note: is your Windows installation up to date with all the security measures issued by Microsoft? I ask this because the viruses that usually cause the NT Authority shutdown should be taken care of by Windows itself now.Thanks for being so helpful. I have found a couple of other sources on the net that confirms I have the nasty bug, however the link to stinger is still unavailable to me. Would it be possible for you PM it to me??Thaks in advance Quote Link to comment Share on other sites More sharing options...
rong Posted March 23, 2007 Report Share Posted March 23, 2007 http://us.mcafee.com/virusInfo/default.asp...val/Stinger.asp If the link doesn't work try copying this one and paste it into your browser. Quote Link to comment Share on other sites More sharing options...
deedub777 Posted March 23, 2007 Author Report Share Posted March 23, 2007 http://us.mcafee.com/virusInfo/default.asp...val/Stinger.asp If the link doesn't work try copying this one and paste it into your browser.Sorry, didn't make myself clear... I can get to the webpage, it's when I click the link to download stinger.exe it cannot find it Quote Link to comment Share on other sites More sharing options...
mcb2001 Posted March 23, 2007 Report Share Posted March 23, 2007 tbh, if its an original windows install (which will pass validation) you should be able to download microsofts "malicious software removal tool" which takes care of the virus aswell (as far as i remember, its seldom i see virus' on my own system )http://www.microsoft.com/security/malwareremove/default.mspx Quote Link to comment Share on other sites More sharing options...
-pops- Posted March 23, 2007 Report Share Posted March 23, 2007 I understand now what you mean about not being able to access the Stinger download. Must be a temporary blip as it was working earlier in the week.As mcb2001 says, though, the MS tool should be able to do it but your system must be fully up to date to have this installed - which it should be anyway. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.