How Do you fix the system shutdown bug?

Hello fellow forum members.

I have a friend who is experiencing the "system shutdown bug", which I think is a variation of one of the "bagle" worms. I can't remember which one. Anyway, I'm sure some of you are familiar with it. Her system gets a pop up screen stating that the system will shutdown in 60 seconds. She has McAfee antivirus available but can't get it to install correctly. I've suggested to her to start up her computer in "Safe" mode to install her antivirus. Then go online to get the latest updates, then run a scan. I think that McAfee has an "AVERT" virus removal tool, but I can't remember for sure. I also know that there is an 18 step procedure to clean a computer already listed on this forum, but was not sure that she could follow those steps with this "worm" constantly shutting down her system. Any advice or additional steps to help her would be appreciated.

Thanks in advance

Creekside Rogue

 

Hi, Mcafee stinger can remove the Bagle worms http://vil.nai.com/vil/stinger/

Also try the free cleaner from Nod32 by Paolo Monti
http://www.nod32.com/home/home.htm

Turn off system restore, boot in safe mode and run stinger, if this doesn't work try an update the Mcafee AV and scan with that.

 

60 seconds is not a very long time......if need be..you can download either of the cleaning programs thats been listed..place them on a floppy and then install them on your friends computer......

 

To add to Sweetie(*)(*) instructions, your friend should first go to Microsoft Updates site and install all Critical Updates.

To stop the system from shutting down:
From this link: http://vil.nai.com/vil/content/v_125007.htm

Once her system is clean, she can try reinstalling her anti-virus and then get the updates for it and do a full system scan.

Regards,

snap

 

Thanks for everyone's replies. All good info. I appreciate it. I never failed to find the help and info I've needed when approaching a computer security problem on this forum.

Thanks again,

Creekside Rogue

 

Your very welcome, Creekside Rogue.

Oh, the other link you were looking for on this forum is here:
General Cleaning Instructions

Good luck!

snap

 

Click on Start> Run

Type in the following:

shutdown -a

Click OK

This will abort the shutdown process

Hope this helps...

Cheers

 

BlackSpear......thanks for sharing..........appreciated. (is this related only to that particular virus?)

 

Hi TSG, no, it aborts a shutdown, period, I had one that was related to a lsass.exe error (NOT a virus in this case), see here for a very long winded story

Cheers

 

I've been experiencing the same problem... Very sad indeed. And what's more is that my system is Windows 2000 and didn't have that 'shutdown' utility!

Fortunately I can start up in Safe Mode and I'm ready to follow that 18 steps procedure.

Thanks for Blackspear's help too.