Win2k and 60sec Shutdown Countdown

[Pakman117]

Hi, I'm trying to fix some kid's computer here that is currently running win2k sp4. Everytime he tries to boot up normally, before he can even login, it says "The system process C:\WINNT\SYSTEM32\SERVICES.EXE terminated unexpectedly with status code 128." He already has the highest service pack, we have run norton, avast, some thing called "cleaner", cwshredder, sasser detection tools from MS and norton, and maybe something else. I have also deleted every REG_MULTI_SZ data type under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\Shares, for every controlset. I have tried booting from previous good state, unplugged the network cable, installed firewalls, nothing seems to work. The only way it doesnt get the message is if we boot from safe mode, or even safe mode with networking. Finally, I tried to disable some startup programs, but this didn't solve anything either. I suppose I could start deleting some drivers, but does anyone else have any idea?

 

[johnjkr1]

That is clearly one of the worms that is going around...sounds like the older blaster? worm. Try housecall.antivirus.com, if that does not work you can disable the 60 second countdown...if you still can't get rid of it, format.

read the second post here, tells you how to disable the 60 second shutdown:

http://www.talkroot.com/archive/topic/16347-1.html