GSL SG hmm..... strange never see before this kind of shutdown on Windows XP Service Pack 2 ,then it must kanna virus, possible is Sasser.
chanff8 SG http://www.sysinfo.org/startuplist.php?letter=&filter=lsass&count=50&offset=0 If theres 2 lsass.exes in yr task manager... Congrats, you strike toto
ndmmxiaomayi SG It doesn't happen for XP SP2 because once you installed SP2, you would have installed the necessary patches as well. ceecookie could be using XP SP1 or earlier versions. For more information, visit: http://www.symantec.com/avcenter/venc/data/w32.sasser.g.html http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx
GSL SG ceecookie is using Windows XP Service Pack 2 (SP2).(because i have see it on the HijackThis Log he posted.
lpx88 SG yep and after that while the shutdown process is being cancelled download This Patch to remove the worm frm ur system...i kena dis worm 2 yrs ago..and my frien taught me a method lyk this to cancel the 'shut down within one sec' thing
ndmmxiaomayi SG Make sure that the username is system, not some other user names. Edited the screenshot. This time not very small until cannot see.
stare-what-stare SG you can try mcaffee sting…or if really bo bian just reformatt com the best way liao.then after you reformatt com get all your stuff inside…then scan make sure no virus then make a back up disc…then next time you kena virus…just back up lor…everything cleared and restored.
GSL SG ceecookie, do u download all the latest windows XP Patch on Windows Update website ? I Think there's an Emergency Patch for internet explorer.(Release yesterday)
