PC Review Forums Newsgroups Windows XP Windows XP Configuration computer crash due to lsass.exe

Reply

computer crash due to lsass.exe

 
Thread Tools Rate Thread
Old 20-06-2004, 06:23 AM   #1
michael
Guest
 
Posts: n/a
Default computer crash due to lsass.exe


my computer keeps on on crashing after a few minutes on,
with message NT AUTHORITY\system "c:\windows\system32
\lsass.exe" 1073741819,this computer will close down in
30 seconds. how do I overcome this problem?
Urgent!!!
Please kindly advise.

  Reply With Quote
Old 20-06-2004, 06:48 AM   #2
NoNoBadDog!
Guest
 
Posts: n/a
Default Re: computer crash due to lsass.exe

Congratulations!



Your system is infected with the much publicized Sasser worm. You have
allowed
yourself to become infected because of ALL of the following;


1. You have not updated your version of Windows.

2. You are not using an UP TO DATE antivirus program.

3. You connected to the internet without a firewall on your computer.

Until you correct ALL of the above situations, you will remain vulnerable to
infection not only by SASSER, but also by the thousands of other worms,
viruses, trojans, keyloggers, spyware, malware, etc.

Because you do not practice even the most basic level of computer security,
you are not only a threat to yourself but to the entire internet community.
When your machine is infected, it looks for other machines, owned by persons
like yourself who have poor computer security practices, to infect.

First, disconnect from the network.


When the shutdown message appears, go START > Run and type in "shutdown -a"
(without the quotes), and hit the enter key.

Download the Windows critical update and the SASSER removal tool.here are
the

links..



Security Update:



http://www.microsoft.com/downloads/...&displaylang=en





and the SASSER removal Tool:



http://www.microsoft.com/downloads/...&displaylang=en


After rebooting, go to the website of the company that makes your antivirus
program and download all the updates that are available. If your antivirus
has expired, you must
purchase a new one.
Third, go to www.zonealarm.com and download the FREE firewall.
Keep your version of Windows updated. Always install any critical patches
that are posted to the Microsoft update website.

Keep you antivirus program up to date. New virus detection signatures are
released nearly on a daily basis, so this is something you should do every
day. Not once a month, or "when I have time", or "when I remember".

Once you have done these things, you will find your internet experience to
be much safer and happier.


Bobby





"michael" <mllch8@yahoo.com> wrote in message
news:1e97801c4567e$613926e0$a301280a@phx.gbl...
> my computer keeps on on crashing after a few minutes on,
> with message NT AUTHORITY\system "c:\windows\system32
> \lsass.exe" 1073741819,this computer will close down in
> 30 seconds. how do I overcome this problem?
> Urgent!!!
> Please kindly advise.
>



  Reply With Quote
Old 20-06-2004, 06:56 AM   #3
Jupiter Jones [MVP]
Guest
 
Posts: n/a
Default Re: computer crash due to lsass.exe

Michael;
You most likely have Sasser.
Follow this to get rid of Sasser:
http://www3.telus.net/dandemar/sasser.htm

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar/


"michael" <mllch8@yahoo.com> wrote in message
news:1e97801c4567e$613926e0$a301280a@phx.gbl...
> my computer keeps on on crashing after a few minutes on,
> with message NT AUTHORITY\system "c:\windows\system32
> \lsass.exe" 1073741819,this computer will close down in
> 30 seconds. how do I overcome this problem?
> Urgent!!!
> Please kindly advise.
>



  Reply With Quote
Old 20-06-2004, 04:34 PM   #4
Bruce Chambers
Guest
 
Posts: n/a
Default Re: computer crash due to lsass.exe

Greetings --

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed _after_ a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next Shutdown countdown begins. This will abort the shut down. Also,
make sure you've enabled a firewall before starting, to preclude any
more intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/se...n/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/ve...asser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/defaul...kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.co...moval.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/


Bruce Chambers
--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH


"michael" <mllch8@yahoo.com> wrote in message
news:1e97801c4567e$613926e0$a301280a@phx.gbl...
> my computer keeps on on crashing after a few minutes on,
> with message NT AUTHORITY\system "c:\windows\system32
> \lsass.exe" 1073741819,this computer will close down in
> 30 seconds. how do I overcome this problem?
> Urgent!!!
> Please kindly advise.
>



  Reply With Quote
Old 04-01-2007, 06:23 PM   #5
wantacupofjoe
Junior Member
 
Join Date: Jan 2007
Posts: 1
Trader Rating: (0)
Default

ok...i saw the lsass thing too...but i have it worst...it won't even get to the startup screen to i can use start/run
it said LSASS.exe in the title bar
and here was the message

the procedure entry point SecCache{piPackages could not be located in the dynamic link library Secur32.dll

i have an acer aspire 5000

and when i try to use the recovery disk
it gives me this

File\i386\System32\ntoskrnl.exe could not be loaded. The error code is 4.

Any suggestions as to how to fix it without having to send it off?
wantacupofjoe is offline   Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off