NT Authority/System Shutdown in 60 seconds"

Status
Not open for further replies.
Hi,

I am using a windows 2000 server. the issue is the server getting restarted by itself quite often giving a message "NT Authority/System Shutdown in 60 seconds"

Please help on this issue..

Regards,
Alex Antony
 
Hello and welcome to Techspot.

This may be a symptom of the Blaster or Sasser worm.

Click start/run, type cmd into the run box and press the enter key. At the command prompt type shutdown.exe -a and press the enter key. Type exit.

Run the Microsoft Malicious Removal tool and let us know the results.

Regards Howard :wave: :wave:
 
I tried shutdown.exe -a in the cmd prompt, it has given a message "shutdown.exe -a is not recognised as an internal or external command, operable program or batch file"

Also i found that there is no malacius software running.


regards,
Alex
 
Try the command without the. exe part and see if that helps. I.E. shutdown -a

I also suggest you post a HJT log as an attachment as per the instructions HERE.

Regards Howard :)
 
your Java system is way out of date
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
...
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll <<< [*]

the [*] is the MS version of Java and is in violation of the License agreement.
it has been superceded by the Sunmicro libraries who own the copyright.

when you get the time;
uninstall your current Java and
download and install the official version here
 
I can`t see anything obviously nasty in your HJT log.

However, under running processes, there is this line that I don`t know what it is.

???????????????????????????????

Have you any idea what that is?

jobeard is quite correct that your Java is way out of date. You should follow his advice and update it asap.

NT Authority/System Shutdown in 60 seconds

Is the above the sum total of the message you receive?

I still think there`s a possibility that this could be malware related.

Follow the instructions HERE and post the requested log files.

Regards Howard :)
 
Status
Not open for further replies.
Back