The new forums will be named Coin Return (based on the most recent vote)! You can check on the status and timeline of the transition to the new forums here.
The Guiding Principles and New Rules document is now in effect.

Bad Spyware/Malware/General bad computer thing

BlankspaceBlankspace __BANNED USERS regular
edited May 2007 in Help / Advice Forum
I had a run-in with Spyware a while ago, had to reformat my hard drive. I've been scanning weekly since then, but I missed a week or two. My internet started slowing down recently, so I tried to scan via Ad-Aware but after a few seconds of scanning a message saying "SYSTEM WILL SHUT DOWN IN 60 SECONDS This was iniated by /NTAuthority" and the computer restarts. So far nothing else has provoked this, only scanning for Spyware.

I really don't want to re-format again, is there anything I can do to get rid of it?

SIG.gif
Blankspace on

Posts

  • gneGnegneGne Registered User regular
    edited May 2007
    Could be a virus. I suggest reading throught this: http://forums.anandtech.com/messageview.aspx?catid=33&threadid=2004933&enterthread=y.

    It´s quite a read but it will help you with getting rid of malware and viruses now and preventing it in the future.

    gneGne on
    pasigcopyox6.jpg
  • MKRMKR Registered User regular
    edited May 2007
    First, go to start->run and type in "cmd", then have shutdown -a pre-typed, and press enter in the terminal when it says it's going to shut down.

    There was a worm a while back that did this, but it has been so long that I forgot the name.

    MKR on
  • stovetop25stovetop25 Registered User new member
    edited May 2007
    I would try a program called HijackThis, it's free.

    stovetop25 on
    http://www.unlockmotorolas.com- Motorola and Blackberry unlock codes. Unlock your cell and use it with any provider!
  • ZellZell Registered User regular
    edited May 2007
    Yes, post your HijackThis log.

    Also, Google gives me several interesting results for "ntauthority"

    Zell on
  • FristleFristle Registered User regular
    edited May 2007
    MKR wrote: »
    First, go to start->run and type in "cmd", then have shutdown -a pre-typed, and press enter in the terminal when it says it's going to shut down.

    There was a worm a while back that did this, but it has been so long that I forgot the name.

    That was the worm known as Blaster. It attacked the RPC service, causing the process lsass to crash with a buffer overflow most of the time. That crash is what triggers the system ("Ntauthority\system") to initiate a shutdown.

    It probably isn't that worm (unless you haven't patched your system since 2004). But it could be a similar situation.

    Fristle on
    Fristle.jpg
Sign In or Register to comment.