Is anyone familiar with this?
What type of threat does it pose?
Usually what happens is when I first turn on my computer, after I open my Internet Explorer then maybe 30 seconds to 1 minute later a little window pops up and says:
"NT Authority\System Error Message: "This system is shutting down. Windows must now restart because the Remote Procedure Call (RPC) service terminated unexpectedly."
Then it says it's going to shut down the computer in X seconds...and then it shuts down your computer but it also automatically restarts your computer too.
So I do the same thing, open up my Explorer and it'll do it again one more time.
I've googled this and I've found numerous sites that tell me to download: Symantec W32.Blaster.Worm Removal Tool. Which I have and I ran the program and it told me that I DON'T have this virus worm.
So what should I do? I mean, I know for sure I have it b/c I get the window pop up and then it shuts down my whole system but then the Removal Tool can't find it. ??
Also, somehow this "SpyWare Guard 2008" installed on my computer as well. It's ANNOYING. It pops up every 5 mins or so asking for me to update my version or scan my comp for threats. I also googled this and it said its a FAKE spyware removal program but I can't delete or uninstall the program.
What threats does this virus pose?
Help please.
Page 1 of 1
Nt Authority\system Virus? automatically shuts down your computer
#2
Posted 08 January 2009 - 12:39 AM
Considering its shutting down your computer in less than a minute, the threat is pretty high. Most people end up doing a repair install which might leave traces, or formatting. If you have the option put the drive into another computer to save your files, then scan it with a antivirus and anti-spyware such as malwarebytes. Since the files aren't running the antivirus/anti-spyware have a better chance of cleaning and fixing everything.
But otherwise yes its pretty bad.
But otherwise yes its pretty bad.
#3
Posted 08 January 2009 - 06:43 PM
For your shutdown problem, Open the command prompt by going Start > Run > type "cmd" in the box without parenthesis > type "shutdown -a" in the black box that pops up, remove the parenthesis also. It should halt the shutdown process.
I am assuming your machine is a Windows.
Download Malwarebytes Anti-Malware and save it to your desktop. You can get it from here: http://www.besttechie.net/tools/mbam-setup.exe
If you can, be connected to the internet.
While setting up, dont change any of the default settings.
Make sure that Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware are both checked and finish. The program should be updating now.
When it is done, Be on the scanner tab and click "Preform Quick Scan" and if it asks to select a drive, make sure all the drives are selected and scan. When its finished, it will say The scan completed successfully. Click 'Show Results' to display all objects found. Click Okay to the message and click Show Results button and make sure all the problems have a check by them. Then remove.
If Malwarebytes ask to reboot the computer, do so because it could have found a file difficult to remove. Malwarebytes may make changes to your registry to help with the removal process so if you got any real-time protection on and it sees the program, allow it to run.
The logs shows you what you have. You can then rescan in Full Mode. Be sure to update the program again by pressing the Update tab and clicking Check for Updates.
I am assuming your machine is a Windows.
Download Malwarebytes Anti-Malware and save it to your desktop. You can get it from here: http://www.besttechie.net/tools/mbam-setup.exe
If you can, be connected to the internet.
While setting up, dont change any of the default settings.
Make sure that Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware are both checked and finish. The program should be updating now.
When it is done, Be on the scanner tab and click "Preform Quick Scan" and if it asks to select a drive, make sure all the drives are selected and scan. When its finished, it will say The scan completed successfully. Click 'Show Results' to display all objects found. Click Okay to the message and click Show Results button and make sure all the problems have a check by them. Then remove.
If Malwarebytes ask to reboot the computer, do so because it could have found a file difficult to remove. Malwarebytes may make changes to your registry to help with the removal process so if you got any real-time protection on and it sees the program, allow it to run.
The logs shows you what you have. You can then rescan in Full Mode. Be sure to update the program again by pressing the Update tab and clicking Check for Updates.
#4
Posted 09 January 2009 - 05:47 PM
^
OK so I did what you said, downloaded Malwarebytes Anti-Malware, performed the scan etc.
It found around 33 threats and I deleted them all. Then it shut down my computer to finalize the deletion.
When my computer restarted, the NT Authority/System AND the fake Spyware Guard 2009 no longer popped up.
So am I good then? Is it really that easy?
I am sorry but I don't know much about viruses/spyware/malware/etc.
THANK you both for your help!!!!!!
OK so I did what you said, downloaded Malwarebytes Anti-Malware, performed the scan etc.
It found around 33 threats and I deleted them all. Then it shut down my computer to finalize the deletion.
When my computer restarted, the NT Authority/System AND the fake Spyware Guard 2009 no longer popped up.
So am I good then? Is it really that easy?
I am sorry but I don't know much about viruses/spyware/malware/etc.
THANK you both for your help!!!!!!
#5
Posted 10 January 2009 - 10:37 PM
QUOTE (Born: 1985 @ Jan 9 2009, 05:47 PM) <{POST_SNAPBACK}>
^
OK so I did what you said, downloaded Malwarebytes Anti-Malware, performed the scan etc.
It found around 33 threats and I deleted them all. Then it shut down my computer to finalize the deletion.
When my computer restarted, the NT Authority/System AND the fake Spyware Guard 2009 no longer popped up.
So am I good then? Is it really that easy?
I am sorry but I don't know much about viruses/spyware/malware/etc.
THANK you both for your help!!!!!!
OK so I did what you said, downloaded Malwarebytes Anti-Malware, performed the scan etc.
It found around 33 threats and I deleted them all. Then it shut down my computer to finalize the deletion.
When my computer restarted, the NT Authority/System AND the fake Spyware Guard 2009 no longer popped up.
So am I good then? Is it really that easy?
I am sorry but I don't know much about viruses/spyware/malware/etc.
THANK you both for your help!!!!!!
Well, there might be a chance for remnant files from the virus which AV's cannot pick up.
Also, No Anti-Virus programs are 100%. Its better to run several other scanners, as well as your primary, as one AV program might miss while the other catches. Just dont have two AV's running in Real-Time (Running constantly in the background)
Do you mind posting up the log? You can find it under the Logs tab. Just copy and paste it.
#6
Posted 15 January 2009 - 06:23 AM
If i were you, i'd back up sensitive data on an external HD, reformat, and SCAN the external HD with several scanners before moving it back to your squeaky clean HD.
♥ joon™
Get Apple Mac Certified Help - Contact Me
Follow me on Twitter @iambrianjung
Questions about Korea? Ask them here
My Anime List
My Drama List
Get Apple Mac Certified Help - Contact Me
Follow me on Twitter @iambrianjung
Questions about Korea? Ask them here
My Anime List
My Drama List
Share this topic:
Page 1 of 1












