| Groups | Blog | Home |
iis security : NT Authority/System
time I am on the internet, I get this message (about ten minutes into it)telling me that there was an error, send an error report to Microsoft or not. I have tried both ways, and I get the message that NT Authoriy/System is shutting down the system, and I can't override it. Is
Install:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-039.asp As soon as you can! You are running the 32-bit version Also enable Windows XP's built in firewall: http://support.microsoft.com/default.aspx?scid=kb;EN-US;283673 Then go to WindowsUpdate to pick up the latest updates: http://windowsupdate.microsoft.com More info about the worm: http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html -- --Jonathan Maltz [Microsoft MVP - Windows Server] http://www.imbored.biz - A Windows Server 2003 visual, step-by-step tutorial site :-) Only reply by newsgroup. If I see an email I didn't ask for, it will be deleted without reading. [quoted text, click to view] "Linda" <anonymous@discussions.microsoft.com> wrote in message news:079501c39dd3$cd209230$a401280a@phx.gbl... > I'm not sure if this is the right newsgroup. But every > time I am on the internet, I get this message (about ten > minutes into it)telling me that there was an error, send > an error report to Microsoft or not. I have tried both > ways, and I get the message that NT Authoriy/System is > shutting down the system, and I can't override it. Is > there something going on that I am not aware of?
Hello Jonathan, Thanks for your help, question though. I
have automatic Windows Update working almost on a daily basis these days. I also have McAfee Firewall running also. Doesn't this help any? Actually while I am writing this, that stupid message has come up again. [quoted text, click to view] >-----Original Message-----
>Install: >http://www.microsoft.com/technet/treeview/default.asp? url=/technet/security/bulletin/MS03-039.asp >As soon as you can! You are running the 32-bit version > >Also enable Windows XP's built in firewall: >http://support.microsoft.com/default.aspx?scid=kb;EN- US;283673 > >Then go to WindowsUpdate to pick up the latest updates: >http://windowsupdate.microsoft.com > >More info about the worm: >http://securityresponse.symantec.com/avcenter/venc/data/w 32.blaster.worm.html > >-- >--Jonathan Maltz [Microsoft MVP - Windows Server] >http://www.imbored.biz - A Windows Server 2003 visual, step-by-step >tutorial site :-) >Only reply by newsgroup. If I see an email I didn't ask for, it will be >deleted without reading. > > >"Linda" <anonymous@discussions.microsoft.com> wrote in message >news:079501c39dd3$cd209230$a401280a@phx.gbl... >> I'm not sure if this is the right newsgroup. But every >> time I am on the internet, I get this message (about ten >> minutes into it)telling me that there was an error, send >> an error report to Microsoft or not. I have tried both >> ways, and I get the message that NT Authoriy/System is >> shutting down the system, and I can't override it. Is >> there something going on that I am not aware of? > > >.
Weird that AU didn't pick it up. The exact message is about RPC being
terminated, correct? As I said, download and install this patch (32-bit version) http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-039.asp And see if it still happens -- --Jonathan Maltz [Microsoft MVP - Windows Server] http://www.imbored.biz - A Windows Server 2003 visual, step-by-step tutorial site :-) Only reply by newsgroup. If I see an email I didn't ask for, it will be deleted without reading. [quoted text, click to view] "Linda" <anonymous@discussions.microsoft.com> wrote in message news:063801c39e90$21cedc30$a401280a@phx.gbl... > Hello Jonathan, Thanks for your help, question though. I > have automatic Windows Update working almost on a daily > basis these days. I also have McAfee Firewall running > also. Doesn't this help any? Actually while I am writing > this, that stupid message has come up again. > > >-----Original Message----- > >Install: > >http://www.microsoft.com/technet/treeview/default.asp? > url=/technet/security/bulletin/MS03-039.asp > >As soon as you can! You are running the 32-bit version > > > >Also enable Windows XP's built in firewall: > >http://support.microsoft.com/default.aspx?scid=kb;EN- > US;283673 > > > >Then go to WindowsUpdate to pick up the latest updates: > >http://windowsupdate.microsoft.com > > > >More info about the worm: > >http://securityresponse.symantec.com/avcenter/venc/data/w > 32.blaster.worm.html > > > >-- > >--Jonathan Maltz [Microsoft MVP - Windows Server] > >http://www.imbored.biz - A Windows Server 2003 visual, > step-by-step > >tutorial site :-) > >Only reply by newsgroup. If I see an email I didn't ask > for, it will be > >deleted without reading. > > > > > >"Linda" <anonymous@discussions.microsoft.com> wrote in > message > >news:079501c39dd3$cd209230$a401280a@phx.gbl... > >> I'm not sure if this is the right newsgroup. But every > >> time I am on the internet, I get this message (about > ten > >> minutes into it)telling me that there was an error, > send > >> an error report to Microsoft or not. I have tried both > >> ways, and I get the message that NT Authoriy/System is > >> shutting down the system, and I can't override it. Is > >> there something going on that I am not aware of? > > > > > >. > >
Linda,
I'd suggest you take a look at this page : http://www.microsoft.com/security/incident/blast.asp Regards, Paul Lynch
Hi Jonathan,
Well, I have downloaded and installed the patch, though what I find funny, is when I verified what updates have been successful, KB824146 is there and it was done on September 10th. And yes, it is the message about RPC being terminated. I will wait a couple of days and see if it happens again. Do you think I need the Blaster worm removal tool? It seems very complicated. Thanks again for all your help. [quoted text, click to view] >-----Original Message-----
>Weird that AU didn't pick it up. The exact message is about RPC being >terminated, correct? > >As I said, download and install this patch (32-bit version) >http://www.microsoft.com/technet/treeview/default.asp? url=/technet/security/bulletin/MS03-039.asp > >And see if it still happens > >-- >--Jonathan Maltz [Microsoft MVP - Windows Server] >http://www.imbored.biz - A Windows Server 2003 visual, step-by-step >tutorial site :-) >Only reply by newsgroup. If I see an email I didn't ask for, it will be >deleted without reading. > > >"Linda" <anonymous@discussions.microsoft.com> wrote in message >news:063801c39e90$21cedc30$a401280a@phx.gbl... >> Hello Jonathan, Thanks for your help, question though. I >> have automatic Windows Update working almost on a daily >> basis these days. I also have McAfee Firewall running >> also. Doesn't this help any? Actually while I am writing >> this, that stupid message has come up again. >> >> >-----Original Message----- >> >Install: >> >http://www.microsoft.com/technet/treeview/default.asp? >> url=/technet/security/bulletin/MS03-039.asp >> >As soon as you can! You are running the 32-bit version >> > >> >Also enable Windows XP's built in firewall: >> >http://support.microsoft.com/default.aspx?scid=kb;EN- >> US;283673 >> > >> >Then go to WindowsUpdate to pick up the latest updates: >> >http://windowsupdate.microsoft.com >> > >> >More info about the worm: >> >http://securityresponse.symantec.com/avcenter/venc/data/w >> 32.blaster.worm.html >> > >> >-- >> >--Jonathan Maltz [Microsoft MVP - Windows Server] >> >http://www.imbored.biz - A Windows Server 2003 visual, >> step-by-step >> >tutorial site :-) >> >Only reply by newsgroup. If I see an email I didn't ask >> for, it will be >> >deleted without reading. >> > >> > >> >"Linda" <anonymous@discussions.microsoft.com> wrote in >> message >> >news:079501c39dd3$cd209230$a401280a@phx.gbl... >> >> I'm not sure if this is the right newsgroup. But every >> >> time I am on the internet, I get this message (about >> ten >> >> minutes into it)telling me that there was an error, >> send >> >> an error report to Microsoft or not. I have tried both >> >> ways, and I get the message that NT Authoriy/System is >> >> shutting down the system, and I can't override it. Is >> >> there something going on that I am not aware of? >> > >> > >> >. >> > > > >.
Well, I'd start by searching for the Blaster variant EXE's. Then a
web-based virus scan (from a place like www.antivirus.com ) -- --Jonathan Maltz [Microsoft MVP - Windows Server] http://www.imbored.biz - A Windows Server 2003 visual, step-by-step tutorial site :-) Only reply by newsgroup. If I see an email I didn't ask for, it will be deleted without reading. [quoted text, click to view] "Linda" <anonymous@discussions.microsoft.com> wrote in message news:051701c39f53$96cd8860$a401280a@phx.gbl... > Hi Jonathan, > > Well, I have downloaded and installed the patch, though > what I find funny, is when I verified what updates have > been successful, KB824146 is there and it was done on > September 10th. And yes, it is the message about RPC > being terminated. I will wait a couple of days and see if > it happens again. Do you think I need the Blaster worm > removal tool? It seems very complicated. Thanks again for > all your help. > > >-----Original Message----- > >Weird that AU didn't pick it up. The exact message is > about RPC being > >terminated, correct? > > > >As I said, download and install this patch (32-bit > version) > >http://www.microsoft.com/technet/treeview/default.asp? > url=/technet/security/bulletin/MS03-039.asp > > > >And see if it still happens > > > >-- > >--Jonathan Maltz [Microsoft MVP - Windows Server] > >http://www.imbored.biz - A Windows Server 2003 visual, > step-by-step > >tutorial site :-) > >Only reply by newsgroup. If I see an email I didn't ask > for, it will be > >deleted without reading. > > > > > >"Linda" <anonymous@discussions.microsoft.com> wrote in > message > >news:063801c39e90$21cedc30$a401280a@phx.gbl... > >> Hello Jonathan, Thanks for your help, question though. > I > >> have automatic Windows Update working almost on a daily > >> basis these days. I also have McAfee Firewall running > >> also. Doesn't this help any? Actually while I am > writing > >> this, that stupid message has come up again. > >> > >> >-----Original Message----- > >> >Install: > >> >http://www.microsoft.com/technet/treeview/default.asp? > >> url=/technet/security/bulletin/MS03-039.asp > >> >As soon as you can! You are running the 32-bit > version > >> > > >> >Also enable Windows XP's built in firewall: > >> >http://support.microsoft.com/default.aspx?scid=kb;EN- > >> US;283673 > >> > > >> >Then go to WindowsUpdate to pick up the latest > updates: > >> >http://windowsupdate.microsoft.com > >> > > >> >More info about the worm: > >> > >http://securityresponse.symantec.com/avcenter/venc/data/w > >> 32.blaster.worm.html > >> > > >> >-- > >> >--Jonathan Maltz [Microsoft MVP - Windows Server] > >> >http://www.imbored.biz - A Windows Server 2003 visual, > >> step-by-step > >> >tutorial site :-) > >> >Only reply by newsgroup. If I see an email I didn't > ask > >> for, it will be > >> >deleted without reading. > >> > > >> > > >> >"Linda" <anonymous@discussions.microsoft.com> wrote in > >> message > >> >news:079501c39dd3$cd209230$a401280a@phx.gbl... > >> >> I'm not sure if this is the right newsgroup. But > every > >> >> time I am on the internet, I get this message (about > >> ten > >> >> minutes into it)telling me that there was an error, > >> send > >> >> an error report to Microsoft or not. I have tried > both > >> >> ways, and I get the message that NT Authoriy/System > is > >> >> shutting down the system, and I can't override it. > Is > >> >> there something going on that I am not aware of? > >> > > >> > > >> >. > >> > > > > > > >. > >
Don't see what you're looking for? Try a search.
|
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
| home · blog · groups | Questions? Comments? Contact the dn |