You have 60s before your computer reboots

[Bulldozer]

I was just browsing some websites when I got a pop-up (not an advertisement type) that said I had 60 seconds to close apps and save work, at which time the system would be rebooting. It said something about nt authority/system. I've never seen anything like this. I'm running win2k pro and had bearshare open but not transferring or searching. I was browsing a snowmobile messageboard, no possibility of malicious activity there. I was uploading an mp3 on AIM.

Has anybody else had an experience like this? I tried taking a screenshot of it but for some reason it wouldnt paste into photoshop.

 

[b0mbrman]

<< I was browsing a snowmobile messageboard >>


That should be how all horror-stories AND pr0n movies start

 

[Bulldozer]

Nobody has ever seen this?

 

[Russ]

Bulldozer,

It sounds like an application error. Check Event Viewer.

Russ, NCNE

 

[Bulldozer]

Thanks for the reply, Russ. I didn't know about the event viewer. Nothing looked out of the ordinary in there.

 

[Russ]

Did you check both system log and application log?

Russ, NCNE

 

[Bulldozer]

Yes, I checked both logs.

 

[GISTechnician]

Sounds like somebody shut you down remotely. Are you on cable/dsl?
Have you ever heard of PSTOOLS. I've used it before to remotely reboot networked computers. I think it gives you a message just like that before it reboots.

*Edit*

Just tested it.

That is the exact same message you get when you use PSHUTDOWN to remotely shutdown a computer.

Hereis the link for the guys that make this software.

 

[err]

yeah ... I know this is a message that resulted from shutdown.exe

This is pretty serious if people can run shutdown.exe on your machine. Make sure to change all administrators credentials

eRr

 

[Bulldozer]

<< Sounds like somebody shut you down remotely. Are you on cable/dsl?
Have you ever heard of PSTOOLS. I've used it before to remotely reboot networked computers. I think it gives you a message just like that before it reboots.

*Edit*

Just tested it.

That is the exact same message you get when you use PSHUTDOWN to remotely shutdown a computer.

Hereis the link for the guys that make this software. >>





Do you know how I can check if I have the software installed to allow someone to do this?

 

[Bulldozer]

What exactly is shutdown.exe and what is it used for?

Maybe I shouldn't log on as adminstrator anymore. I haven't had any problems doing it for over a year, though. I don't have any virus software installed either, BTW.

 

[mastertech01]

Maybe you should invest in a firewall program or hardware firewall

 

[yakko]

You got a link to the site? I am curious to see it for myself.

 

[Keego]

yeah I've seen that before, it rocks

don't delete shutdown.exe, that's a part of windows.




I remember what I saw do it... a Windows NT Resource Kit proggie

 

[Bulldozer]

<< You got a link to the site? I am curious to see it for myself. >>



What site do you want a link to?