Computer continually re-boots

I am having a huge problem booting my computer. When I try to log-in with my
user that has administrator access I get an error that shuts the computer
down in 60 seconds. However, when I use the guest log-in that does not have
administrator access, I am allowed to log on as if there is nothing wrong.
I also cannot re-install my Norton Internet Security 2005 software as I
cannot log in as an administrator (I previously uninstalled it as I was
having problems with it telling my my subscription was expired - when it
really is not)
Help!!!!!!!!!!!

I believe a program causing reboot needs the Local Administrator's

previlage. That's why a guest account log-in won't reboot.

Try the following to see if it works:

Log on using the user account with admin previlage. Then in a console

window, type "shutdown -a", that will abort the shutdown

After that, try to figure out which program causing the reboot.

Patrick Yang

"VSW" <> wrote in message
news:07D56B09-A2A5-469B-AA48-...
>I am having a huge problem booting my computer. When I try to log-in with
>my
> user that has administrator access I get an error that shuts the computer
> down in 60 seconds. However, when I use the guest log-in that does not
> have
> administrator access, I am allowed to log on as if there is nothing wrong.
> I also cannot re-install my Norton Internet Security 2005 software as I
> cannot log in as an administrator (I previously uninstalled it as I was
> having problems with it telling my my subscription was expired - when it
> really is not)
> Help!!!!!!!!!!!

On Sun, 23 Oct 2005 13:55:03 -0700, VSW <> wrote:

>I am having a huge problem booting my computer. When I try to log-in with my
>user that has administrator access I get an error that shuts the computer
>down in 60 seconds. However, when I use the guest log-in that does not have
>administrator access, I am allowed to log on as if there is nothing wrong.
>I also cannot re-install my Norton Internet Security 2005 software as I
>cannot log in as an administrator (I previously uninstalled it as I was
>having problems with it telling my my subscription was expired - when it
>really is not)
>Help!!!!!!!!!!!

Click Start, Run. In the Run box, type (or copy & paste) "shutdown -a" without the quotes and
click OK. This will abort the 60 second shutdown and let you look for the cause.

Windows XP has a default setting to "Restart on failure"

Right click on "My Computer" and select Manage.
Expand the Event Viewer category and look through each of the three sub-categories for the red
flagged error records. The date and time of these should correspond to your restarts. Double
click on an error record to see the details of the error.

You can change this restart behavior if you want:
Click Start, Settings, Control Panel, System, Advanced. In the Startup and Recovery section,
click on the "Settings" button to open the Startup and Recovery window.

In the System Failure section, uncheck "Automatically restart", Click "Apply", "OK"

After that change the computer will no longer restart when a system failure occurs. Instead it
will probably throw up a "Blue Screen Of Death" with a STOP error message and then halt
completely, requiring a manual power off and restart (or reset if it has a hardware reset
switch). However, the contents of the STOP error message will give a specific clue as to the
underlying cause of the problem.

-------------------------------------------------------------------------------------------

There is also the possibility of the Blaster or Sasser worm...
"This shutdown initiated by NT AUTHORITY\SYSTEM"
If the error is about RPC, it could be the MSBlast worm.
If the error is about lsass.exe, it could be the W32.Sasser worm

This is a link to a small FREE program by McAfee Anti-virus named Stinger.
It will scan your system for 53 known viruses and trojans and repair them.
You don't need McAfee anti-virus installed on your computer... this is a
stand alone program. http://vil.nai.com/vil/stinger/ or
http://us.mcafee.com/virusInfo/default.asp?id=stinger
Direct Download: http://download.nai.com/products/mca..._i_n_g_e_r.exe

If it finds anything, you may have to disable System Restore, and run Stinger in the Safe Mode.

To disable System Restore, Click Start, Programs, Accessories, System Tools, System Restore,
System Restore Settings, "System Restore" tab, and check the box. "Turn Off System Restore on
all drives", click "Apply" and "OK".

To restart in the Safe Mode, Reboot, and after the Power On Self Test (POST), press and hold the
F8 key.

Can you explain what a console window is and how I open one?
Thanks,
Veronica


"Patrick Yang [MSFT]" wrote:

> I believe a program causing reboot needs the Local Administrator's
>
> previlage. That's why a guest account log-in won't reboot.
>
> Try the following to see if it works:
>
> Log on using the user account with admin previlage. Then in a console
>
> window, type "shutdown -a", that will abort the shutdown
>
> After that, try to figure out which program causing the reboot.
>
> Patrick Yang
>
> "VSW" <> wrote in message
> news:07D56B09-A2A5-469B-AA48-...
> >I am having a huge problem booting my computer. When I try to log-in with
> >my
> > user that has administrator access I get an error that shuts the computer
> > down in 60 seconds. However, when I use the guest log-in that does not
> > have
> > administrator access, I am allowed to log on as if there is nothing wrong.
> > I also cannot re-install my Norton Internet Security 2005 software as I
> > cannot log in as an administrator (I previously uninstalled it as I was
> > having problems with it telling my my subscription was expired - when it
> > really is not)
> > Help!!!!!!!!!!!
>
>
>

Thank you - you were very detailed. I'll try your suggestions when I get
home from work later tonight.


"Unk" wrote:

> On Sun, 23 Oct 2005 13:55:03 -0700, VSW <> wrote:
>
> >I am having a huge problem booting my computer. When I try to log-in with my
> >user that has administrator access I get an error that shuts the computer
> >down in 60 seconds. However, when I use the guest log-in that does not have
> >administrator access, I am allowed to log on as if there is nothing wrong.
> >I also cannot re-install my Norton Internet Security 2005 software as I
> >cannot log in as an administrator (I previously uninstalled it as I was
> >having problems with it telling my my subscription was expired - when it
> >really is not)
> >Help!!!!!!!!!!!
>
> Click Start, Run. In the Run box, type (or copy & paste) "shutdown -a" without the quotes and
> click OK. This will abort the 60 second shutdown and let you look for the cause.
>
> Windows XP has a default setting to "Restart on failure"
>
> Right click on "My Computer" and select Manage.
> Expand the Event Viewer category and look through each of the three sub-categories for the red
> flagged error records. The date and time of these should correspond to your restarts. Double
> click on an error record to see the details of the error.
>
> You can change this restart behavior if you want:
> Click Start, Settings, Control Panel, System, Advanced. In the Startup and Recovery section,
> click on the "Settings" button to open the Startup and Recovery window.
>
> In the System Failure section, uncheck "Automatically restart", Click "Apply", "OK"
>
> After that change the computer will no longer restart when a system failure occurs. Instead it
> will probably throw up a "Blue Screen Of Death" with a STOP error message and then halt
> completely, requiring a manual power off and restart (or reset if it has a hardware reset
> switch). However, the contents of the STOP error message will give a specific clue as to the
> underlying cause of the problem.
>
> -------------------------------------------------------------------------------------------
>
> There is also the possibility of the Blaster or Sasser worm...
> "This shutdown initiated by NT AUTHORITY\SYSTEM"
> If the error is about RPC, it could be the MSBlast worm.
> If the error is about lsass.exe, it could be the W32.Sasser worm
>
> This is a link to a small FREE program by McAfee Anti-virus named Stinger.
> It will scan your system for 53 known viruses and trojans and repair them.
> You don't need McAfee anti-virus installed on your computer... this is a
> stand alone program. http://vil.nai.com/vil/stinger/ or
> http://us.mcafee.com/virusInfo/default.asp?id=stinger
> Direct Download: http://download.nai.com/products/mca..._i_n_g_e_r.exe
>
> If it finds anything, you may have to disable System Restore, and run Stinger in the Safe Mode.
>
> To disable System Restore, Click Start, Programs, Accessories, System Tools, System Restore,
> System Restore Settings, "System Restore" tab, and check the box. "Turn Off System Restore on
> all drives", click "Apply" and "OK".
>
> To restart in the Safe Mode, Reboot, and after the Power On Self Test (POST), press and hold the
> F8 key.
>
>

You're welcome.

On Mon, 24 Oct 2005 06:05:03 -0700, VSW <> wrote:

>Thank you - you were very detailed. I'll try your suggestions when I get
>home from work later tonight.
>
>
>"Unk" wrote:
>
>> On Sun, 23 Oct 2005 13:55:03 -0700, VSW <> wrote:
>>
>> >I am having a huge problem booting my computer. When I try to log-in with my
>> >user that has administrator access I get an error that shuts the computer
>> >down in 60 seconds. However, when I use the guest log-in that does not have
>> >administrator access, I am allowed to log on as if there is nothing wrong.
>> >I also cannot re-install my Norton Internet Security 2005 software as I
>> >cannot log in as an administrator (I previously uninstalled it as I was
>> >having problems with it telling my my subscription was expired - when it
>> >really is not)
>> >Help!!!!!!!!!!!
>>
>> Click Start, Run. In the Run box, type (or copy & paste) "shutdown -a" without the quotes and
>> click OK. This will abort the 60 second shutdown and let you look for the cause.
>>
>> Windows XP has a default setting to "Restart on failure"
>>
>> Right click on "My Computer" and select Manage.
>> Expand the Event Viewer category and look through each of the three sub-categories for the red
>> flagged error records. The date and time of these should correspond to your restarts. Double
>> click on an error record to see the details of the error.
>>
>> You can change this restart behavior if you want:
>> Click Start, Settings, Control Panel, System, Advanced. In the Startup and Recovery section,
>> click on the "Settings" button to open the Startup and Recovery window.
>>
>> In the System Failure section, uncheck "Automatically restart", Click "Apply", "OK"
>>
>> After that change the computer will no longer restart when a system failure occurs. Instead it
>> will probably throw up a "Blue Screen Of Death" with a STOP error message and then halt
>> completely, requiring a manual power off and restart (or reset if it has a hardware reset
>> switch). However, the contents of the STOP error message will give a specific clue as to the
>> underlying cause of the problem.
>>
>> -------------------------------------------------------------------------------------------
>>
>> There is also the possibility of the Blaster or Sasser worm...
>> "This shutdown initiated by NT AUTHORITY\SYSTEM"
>> If the error is about RPC, it could be the MSBlast worm.
>> If the error is about lsass.exe, it could be the W32.Sasser worm
>>
>> This is a link to a small FREE program by McAfee Anti-virus named Stinger.
>> It will scan your system for 53 known viruses and trojans and repair them.
>> You don't need McAfee anti-virus installed on your computer... this is a
>> stand alone program. http://vil.nai.com/vil/stinger/ or
>> http://us.mcafee.com/virusInfo/default.asp?id=stinger
>> Direct Download: http://download.nai.com/products/mca..._i_n_g_e_r.exe
>>
>> If it finds anything, you may have to disable System Restore, and run Stinger in the Safe Mode.
>>
>> To disable System Restore, Click Start, Programs, Accessories, System Tools, System Restore,
>> System Restore Settings, "System Restore" tab, and check the box. "Turn Off System Restore on
>> all drives", click "Apply" and "OK".
>>
>> To restart in the Safe Mode, Reboot, and after the Power On Self Test (POST), press and hold the
>> F8 key.
>>
>>

omg, UNK, your awsome. completely helped me with the blaster worm problem.
Thank you, Thank You!!!

But i do have two little questions.
Dealing with the worm, all i have to do is the "shutdown -a" and it wont
ever bother me again?
And
Is there a way to completely remove the MS Blaster Worm out of my computer?

From: "SergeLo0001" <>

| But i do have two little questions.
| Dealing with the worm, all i have to do is the "shutdown -a" and it wont
| ever bother me again?
| And
| Is there a way to completely remove the MS Blaster Worm out of my computer?

NO !

This is a virus, and Internet Worm to be exact. You can't even be sure it is the
Lovsan/Blaster worm as that has died off and replaced with other Internet worms such a the
RBot, GAOBot and SDBot.

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm