please help, need some advice. my friend's computer has experienced shutdowns lately. i assumed it was sasser or blaster but the system is fully up to date and patched and several sasser and blaster removers say nothing is there. norton did detect w32 spybot.worm and randex.gen but said it deleted them. i found mslti32.exe under hklm...run and removed it from run and runservices, but it is back. have to look into the randex. norton may have deleted the infected files but not repaired what they have done. any info would be appreciate. the system shutdowns is puzzling. windows is fully patched via windows update. ran microsoft patch anyway and their scanner shows nothing. followed all of their and symantecs steps and no sasser or blaster. ran mcafee stinger and and third sasser remover and nothing is found. they do get the n.t. authority warning and system shutsdown. twice within a few hours last night. any suggestion to followup on this would also be appreciated. thanks.

I also have this problem. I used to cancel the shutdown with the "shutdown -a" comand from the "DOS" prompt (type cmd in start->Run window). My PC does not shut down by itself when the network cable is unpluged.

DT, i don't know if this applies to you but since this computer was fully patched and updated and none of the scanners showed sasser or blaster i was perplexed. however, i found a file on the system and in the registry to run named mslti32.exe. it is related to the sdbot worm. i could not get rid of this via the registry or windows. it keep coming back until i uninstalled peoplepc dial-up internet. maybe it was just a coincidence but the system is now stable and the virus files didn't come back after being removed from the registry. our system shutdowns didn't happen very often, once, maybe twice a day. that problem is also gone now.