Donate SIGN UP

Virus I Think - Help Required

Avatar Image
zipadeedodah | 18:19 Sat 24th Mar 2007 | Technology
4 Answers
This afternoon my computer keeps coming up with a message saying "This system is shutting down. please save all work in progress and log off. Any unsaved changes will be lost. This shutdown was initiated by NT Authority/System"

After searching on the net, it is clearly caused by some kind of virus. Aparantly it is causing lsass.exe to terminate, which then triggers the shutdown. A virus scan has not found any virus's, however one thing was identified, which said:

File: ntoskrnl.exe
Result/Infection: Change
Path: C:\WINDOWS\system32\ntoskrnl.exe

It didn't identify this as a virus, but there's something about it not right I assume.

Any help on this would be greatly appreciated....I really don't know what to do/how to get rid of it.

Thanks very much!
Gravatar

Answers

1 to 4 of 4rss feed

Best Answer

No best answer has yet been selected by zipadeedodah. Once a best answer has been selected, it will be shown here.

For more on marking an answer as the "Best Answer", please visit our FAQ.
Just do a restore to the day before this problem first occurred.
the "sasser" worm causes symptoms like this - download & run "stinger" (from McAfee) or similar if you think you've got it.
As soon as your PC has booted up, click start, then run and type cmd and click ok.

At the prompt type "shutdown -a" with out the quotation marks and hit enter.

Then go to the microsoft site and update your PC, also run a virus scan.

Question Author
Thanks for your help - hopefully it is sorted now, will wait and see!

1 to 4 of 4rss feed

Do you know the answer?

Virus I Think - Help Required

Answer Question >>