issass.exe error and computer reboots

[Tony]

When i go on the internet I get a error stating
that "windows\system32\isass.exe" has terminated
unexpectedly with status code 1073741819.

then computer reboots after 60 seconds. I checked for
virusses but found none please help

 

[tony]

-----Original Message-----
When i go on the internet I get a error stating
that "windows\system32\isass.exe" has terminated
unexpectedly with status code 1073741819.

then computer reboots after 60 seconds. I checked for
virusses but found none please help
.
sory it's lsass.exe

 

[Malke]

What program did you use to check for viruses? Is the program post-2002
and are the definitions up-to-date? The problem you are describing is
typical of infection by the MSBlaster and Sasser worms.

Malke

 

[Rick \Nutcase\ Rogers]

Hi Tony,

This is the sasser worm, please see:

http://vil.nai.com/vil/content/v_125007.htm
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SASSER.A

To stop the shutdown, click start/run, type "shutdown -a" (without the
quotes) and click ok.

Details on the patch needed to prevent it:

http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Bruce Chambers]

Greetings --

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed _after_ a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next Shutdown countdown begins. This will abort the shut down. Also,
make sure you've enabled a firewall before starting, to preclude any
more intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[julia mc]

did you ever get this probhlem solved? i am having the same erro
message now that i have updated to windows xp.

*

-
julia m

 

[Rick \Nutcase\ Rogers]

Hi Julia,

It means you have the sasser virus. Please see:

http://vil.nai.com/vil/content/v_125007.htm
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SASSER.A

To stop the shutdown, click start/run, type "shutdown -a" (without the
quotes) and click ok.

Details on the patch needed to prevent it:
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Rock]

did you ever get this probhlem solved? i am having the same error
message now that i have updated to windows xp.

tony wrote:

julia mc

Have you checked for the sasser worm? Use Trend Micro's Sysclean.
Download it and the signature file, boot into safe mode and run it.

Trend Micro Sysclean
http://www.trendmicro.com/download/dcs.asp

Trend Micro Signature File
http://www.trendmicro.com/download/pattern.asp

 

[Guest]

When i go on the internet I get a error stating
that "windows\system32\isass.exe" has terminated
unexpectedly with status code 1073741819.

then computer reboots after 60 seconds. I checked for
virusses but found none please help

 

[Rick \Nutcase\ Rogers]

Hi,

This is the sasser worm, please see:

http://vil.nai.com/vil/content/v_125007.htm
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SASSER.A

To stop the shutdown, click start/run, type "shutdown -a" (without the
quotes) and click ok.

Details on the patch needed to prevent it:

http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

"I need a solution to this problem" <I need a solution to this
(e-mail address removed)> wrote in message

 

[Guest]

When i go on the internet I get a error stating
that "windows\system32\isass.exe" has terminated
unexpectedly with status code 1073741819.

then computer reboots after 60 seconds. I checked for
virusses but found none please help

 

[Sardonix]

Hi,

I've been having trouble getting around the same exe. On start up I
get the error message "lsass.exe - Bad File The attributes of the
specified mapping file for a section of memory cannot be read". I've
done some searching on the internet and find that windows has a patch
for this problem and that my system may be infected with virus. I've
downloaded the windows patch and a program to get rid of the virus but
I can't get windows to load long enough to install the software.
In your answer to Tony you say to "To stop the shutdown, click
start/run" but in my case clicking the OK button on the above error
message restarts the the machine and I'm stuck in a loop. How can I
get to start button?

Any advice would be greatly appreciated.

D. R.