Re: Windows turns off on its own!

[purplehaz]

Always run a firewall and anti-virus programs on your computer at all times.



You are infected with the Blaster worm virus.



To stop the rebooting/shutdowns, Use the shutdown -a method. Then turn on
the xp firewall.

To turn on the firewall: control panel, network and internet connections,
network connections, right click your connection, properties, advanced tab,
check the protect my computer box. Do this as quickly as you can once the
desktop comes up. Then visit the sites below for the removal and patch info.

Symantec: removal info and removal tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

Also make sure to follow the links to the Microsoft pages for the patch or
visit windows update for the patch after you remove it.

http://support.microsoft.com/?kbid=823980

http://www.microsoft.com/security/incident/blast.asp



mtusk wrote:
> After I connect to the internet using MSN, my computer
> starts shutting down. It shows a window saying your
> computer is shutting down, with a thirty second delay. I
> abort it using "shutdown.exe -a", but it screws
> everything up. For example, the clipboard doesn't work,
> I can't open new windows in Internet Explorer, I can't
> drag and drop icons. Why is my computer shutting down on
> its own?
>
> Just recently, I left the computer on while I was away,
> and when I returned, it had restarted, but with an extra
> user. It was called Cclogin and had a password I didn't
> know.
>
> Are the two things related? I assume the login thing was
> a virus.

[Mark Veldhuis]

Hi,

In article >,
says...
> After I connect to the internet using MSN, my computer
> starts shutting down. It shows a window saying your
> computer is shutting down, with a thirty second delay. I
> abort it using "shutdown.exe -a", but it screws
> everything up. For example, the clipboard doesn't work,
> I can't open new windows in Internet Explorer, I can't
> drag and drop icons. Why is my computer shutting down on
> its own?
>
> Just recently, I left the computer on while I was away,
> and when I returned, it had restarted, but with an extra
> user. It was called Cclogin and had a password I didn't
> know.
>
> Are the two things related? I assume the login thing was
> a virus.

Sounds like your PC has been infected with the Blaster virus.
A search on Google will provide you with lots of information about how
to get rid of it. Or go directly to
http://securityresponse.symantec.com/ . ;-)

Not sure about the extra account. Dunno, could be a virus.
Get a virus checker, update it, and do a scan (after you removed
Blaster). If you want a free one, get AVG: www.grisoft.com .

It wouldn't hurt to check for spyware too: www.lavasoft.de .



Regards,

Mark Veldhuis.

[Tahir Rashid]

You have a very funny problem ... but sorry to say i cant
help , but if i could i would.
thanks,
terry.
>-----Original Message-----
>After I connect to the internet using MSN, my computer
>starts shutting down. It shows a window saying your
>computer is shutting down, with a thirty second delay. I
>abort it using "shutdown.exe -a", but it screws
>everything up. For example, the clipboard doesn't work,
>I can't open new windows in Internet Explorer, I can't
>drag and drop icons. Why is my computer shutting down on
>its own?
>
>Just recently, I left the computer on while I was away,
>and when I returned, it had restarted, but with an extra
>user. It was called Cclogin and had a password I didn't
>know.
>
>Are the two things related? I assume the login thing was
>a virus.
>.
>

[Danny W]

VIRUS SCAN! - could be the Blaster worm or similar (Symantec (Norton) have a
free online service to scan your computer remotely - very good service:
http://security.symantec.com/sscv6/home.asp?j=1&langid=ie&venid=sym&close_parent=true&plfid=23&pkj=OQJTYHGBYNCJEIMXQKC
and select "Virus Detection." - this scanner will not be affected by viruses
on your PC.

Also, the problem may be caused by an error in a service. I know that if
SVCHOST.EXE (runs many of your services) crashes, NTAUTHORITY (the kernel's
all-powerful user ID) can force the system to shutdown. Check the event log
for "Errors" (Admin tools in the classic view control panel).

Danny W




"mtusk" > wrote in message
...
> After I connect to the internet using MSN, my computer
> starts shutting down. It shows a window saying your
> computer is shutting down, with a thirty second delay. I
> abort it using "shutdown.exe -a", but it screws
> everything up. For example, the clipboard doesn't work,
> I can't open new windows in Internet Explorer, I can't
> drag and drop icons. Why is my computer shutting down on
> its own?
>
> Just recently, I left the computer on while I was away,
> and when I returned, it had restarted, but with an extra
> user. It was called Cclogin and had a password I didn't
> know.
>
> Are the two things related? I assume the login thing was
> a virus.

[Please reply to newsgroup.]

Although I am pretty sure that it isn't the Blaster worm, I don't know
what it IS.

Danny W wrote:

> VIRUS SCAN! - could be the Blaster worm or similar (Symantec (Norton) have a
> free online service to scan your computer remotely - very good service:
> http://security.symantec.com/sscv6/home.asp?j=1&langid=ie&venid=sym&close_parent=true&plfid=23&pkj=OQJTYHGBYNCJEIMXQKC
> and select "Virus Detection." - this scanner will not be affected by viruses
> on your PC.
>
> Also, the problem may be caused by an error in a service. I know that if
> SVCHOST.EXE (runs many of your services) crashes, NTAUTHORITY (the kernel's
> all-powerful user ID) can force the system to shutdown. Check the event log
> for "Errors" (Admin tools in the classic view control panel).
>
> Danny W
>
>
>
>
> "mtusk" > wrote in message
> ...
>
>>After I connect to the internet using MSN, my computer
>>starts shutting down. It shows a window saying your
>>computer is shutting down, with a thirty second delay. I
>>abort it using "shutdown.exe -a", but it screws
>>everything up. For example, the clipboard doesn't work,
>>I can't open new windows in Internet Explorer, I can't
>>drag and drop icons. Why is my computer shutting down on
>>its own?
>>
>>Just recently, I left the computer on while I was away,
>>and when I returned, it had restarted, but with an extra
>>user. It was called Cclogin and had a password I didn't
>>know.
>>
>>Are the two things related? I assume the login thing was
>>a virus.
>
>
>

[Patti MacLeod]

Although you're "pretty sure" that it isn't due to the Blaster worm, d/load
and install the KB824146 patch, just in case:
http://support.microsoft.com/?kbid=824146

In order to stay connected long enough to d/load the patch, enable the
Internet Connection Firewall before you connect to the internet:
http://support.microsoft.com/default.aspx?scid=283673#2
Follow the instructions under "To configure Internet Connection Firewall
manually for a connection"


Regards,

--
Patti MacLeod
Microsoft MVP - Windows Shell/User

"Please reply to newsgroup." <"Please reply to newsgroup."> wrote in message
...
> Although I am pretty sure that it isn't the Blaster worm, I don't know
> what it IS.
>
> Danny W wrote:
>
> > VIRUS SCAN! - could be the Blaster worm or similar (Symantec (Norton)
have a
> > free online service to scan your computer remotely - very good service:
> >
http://security.symantec.com/sscv6/home.asp?j=1&langid=ie&venid=sym&close_pa
rent=true&plfid=23&pkj=OQJTYHGBYNCJEIMXQKC
> > and select "Virus Detection." - this scanner will not be affected by
viruses
> > on your PC.
> >
> > Also, the problem may be caused by an error in a service. I know that if
> > SVCHOST.EXE (runs many of your services) crashes, NTAUTHORITY (the
kernel's
> > all-powerful user ID) can force the system to shutdown. Check the event
log
> > for "Errors" (Admin tools in the classic view control panel).
> >
> > Danny W
> >
> >
> >
> >
> > "mtusk" > wrote in message
> > ...
> >
> >>After I connect to the internet using MSN, my computer
> >>starts shutting down. It shows a window saying your
> >>computer is shutting down, with a thirty second delay. I
> >>abort it using "shutdown.exe -a", but it screws
> >>everything up. For example, the clipboard doesn't work,
> >>I can't open new windows in Internet Explorer, I can't
> >>drag and drop icons. Why is my computer shutting down on
> >>its own?
> >>
> >>Just recently, I left the computer on while I was away,
> >>and when I returned, it had restarted, but with an extra
> >>user. It was called Cclogin and had a password I didn't
> >>know.
> >>
> >>Are the two things related? I assume the login thing was
> >>a virus.
> >
> >
> >
>