|WINDOWS\system32\lsass.exe exception

[Rick Frenger]

I recently installed Windows XP on a Toshiba Tecra 8000.
Each time I invoke IEexplorer or Outlook Express and get
connected to my internet provider the following eception
comes up after approx. 5 min. "The application,
C:\WINDOWS\system32\lsass.exe, gnerated an application
error. The error occured on 09/05/2004 @ 17:13:36.753.
The exception generated was c0000005 at address 008tF878.
After 45 sec the system is automatically restarted. Does
anyone have any sage advice?

Thanks,
Rick

 

[NoNoBadDog!]

Lets see....



1. You connected to the internet without enabling the Windows firewall.



2. You also have no antivirus software installed.



3. You did not update your version of windows...if you had, the patch to

prevent infection from the SASSER worm would have been on your system (it's

been available for months).



The reason that your machine is infected is because of all of the above.

You must educate yourself on basic computer security.



Here's what you need to do now, in this exact order...



1. Disconnect the computer from the internet...If you have broadband,

physically disconnect the cable from the back of the computer.





2. Turn the computer on. When the message appears, START>Run>'Shutdown -a"



3. Enable the windows firewall. It is very rudimentary as firewalls go,

but it is better than nothing.



4. Install a reputable Antivirus program. You will have to update it after

re-connecting to the internet, and thereafter you MUST KEEP IT UPDATED.



5. Connect to the internet.



6. Update your antivirus software.



7. Run a scan and let the antivirus software will clean your system.



8. Connect to Windows Update and download ALL Critical downloads. Install

them. You may have to repeat this more than once in order to download and

install all Critical Updates.



9. Never, ever connect to the internet, even briefly, without having met

all of the above requirements.



You not only allowed you machine to be infected, but you turned it into a

tool that is/was looking for other unprotected computers to connect. It has

been recently announced that an unprotected computer can be infected in as

little as 40 seconds.



I would venture a bet that your computer has more than just the latest

variant of the SASSER worm.



Once you begin to practice basic computer security, you can become a

responsible "netizen"



Bobby







Here are some useful links that were posted earlier by Bruce Chambers:





Protect Your PC

http://www.microsoft.com/security/protect/default.asp



Home Computer Security

http://www.cert.org/homeusers/HomeComputerSecurity/



List of Antivirus Software Vendors

http://support.microsoft.com/default.aspx?scid=kb;en-us;49500



Home PC Firewall Guide

http://www.firewallguide.com/



Scumware.com

http://www.scumware.com/

 

[Rick Frenger]

Bobby,

Thank you for you valuable info. You have a unique way of
helping e.g. acting as a parent!!!. I will try to not be
a bad boy in the future.

Thanks again

Rick

 

[Rock]

I recently installed Windows XP on a Toshiba Tecra 8000.
Each time I invoke IEexplorer or Outlook Express and get
connected to my internet provider the following eception
comes up after approx. 5 min. "The application,
C:\WINDOWS\system32\lsass.exe, gnerated an application
error. The error occured on 09/05/2004 @ 17:13:36.753.
The exception generated was c0000005 at address 008tF878.
After 45 sec the system is automatically restarted. Does
anyone have any sage advice?

Thanks,
Rick

Rick, since the system is infected with at least one virus it is
possible it is infected with adware/spyware and other nasties. Here are
some things you should do to clean up the system and keep it clean:

http://www.cert.org/tech_tips/before_you_plug_in.html#III

Run these programs to check for spyware/malware. After installing
update them, then boot into safe mode and run them. You should update
and run them weekly.

Cwshredder
http://aumha.org/freeware/freeware.php#cwshred

Ad-aware SE
http://www.lavasoftusa.com

Spybot Search and Destroy
http://www.safer-networking.org

Bazooka Adware and Spyware Scanner
http://download.com.com/3000-2144-10247783.html

Pest Patrol Free Pest Scanner
http://www.pestscan.com/ScanOrTrial.asp

After your system is clean use these programs to help keep it clean:

Spywareblaster
www.javacoolsoftware.com/sbdownload.html

Spywareguard
http://www.javacoolsoftware.com/sgdownload.html

IE-SPYAD
http://www.staff.uiuc.edu/~ehowes/resource.htm

For viruses:

Online and Downloadable Virus Scanning. In addition to the current AV
program you should have run at least two of these online scans.

Panda ActiveScan
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Bit Defender Online Virus Scan:
http://www.bitdefender.com/scan/license.php

Symantec Online Virus and Security Scan:
http://security.symantec.com/ssc/home.asp

TrendMicro:
http://housecall.trendmicro.com/housecall/start_corp.asp

McAfee Online Virus Scan:
http://www.mcafee.com/myapps/mfs/default.asp

RAV AntiVirus - Scan Online
http://www.ravantivirus.com/scan/

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/

[Note: Stinger looks only for a limited number of specific viruses.
It’s not intended for full strength virus scanning and removal, but it
can help eliminate enough threats to allow you to install and scan with
a full featured AV program.]

Make sure you have a firewall active at all times. If nothing else use
the one built into XP, but there are a variety of free third party ones
that do a better job from Sygate, Zone Alarm or Kerio.

Sygate Personal Firewall
http://smb.sygate.com/products/spf_standard.htm

Zone Alarm
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?lid=staticcomp_za

Kerio Personal Firewall
http://www.kerio.com/kpf_download.html

Lastly check your system for vulnerabilities. Make sure you have all
the latest security patches from Windows Update too.

Websites which will check for vulnerabilities:

Browser Security Tests:
http://www.jasons-toolbox.com/BrowserSecurity/

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

http://bcheck.scanit.be/bcheck/
https://testzone.secunia.com/browser_checker/
www.pcpitstop.com