Automatic System Shutdown

[michele]

Automatic System Shutdown

On 1 May after going online, my pc (XP Home Edition, Sp 1)
started warning me that my pc would shut down within 1
minute, which it did.

It brings up an error message that says there it has
encountered a problem with
"LSA Shell (Export Version)"
Description being: Microsoft Corporation File Version
5.1.2600.1106
It says the shutdown was initiated by the "NT
AUTHORITY\SYSTEM"
And the system process terminated was "C\WINDOWS\system32
\Isass.exe" with status code 1073741819.

I don't know what that is, or what it's for.

The pc freezes since then and nothing loads under up to
15 minutes almost, and it shuts down automatically if I
get online at all. Some sites don't open at all.

The ONLY thing that helped was a system restore, but then
going on the web to check my hotmail account or even
attempting to get critical updates today, it happens over
and over again.

The antivirus did a complete scan and found nothing.

I have had to do the system restore all over again,
several times, once I attempt to connect to the internet
and visit/do anything at all.
Need some HELP please.

Thanks,
Michele.

 

[Ronnie Vernon MVP]

Automatic System Shutdown

On 1 May after going online, my pc (XP Home Edition, Sp 1)
started warning me that my pc would shut down within 1
minute, which it did.

It brings up an error message that says there it has
encountered a problem with
"LSA Shell (Export Version)"
Description being: Microsoft Corporation File Version
5.1.2600.1106
It says the shutdown was initiated by the "NT
AUTHORITY\SYSTEM"
And the system process terminated was "C\WINDOWS\system32
\Isass.exe" with status code 1073741819.

I don't know what that is, or what it's for.

The pc freezes since then and nothing loads under up to
15 minutes almost, and it shuts down automatically if I
get online at all. Some sites don't open at all.

The ONLY thing that helped was a system restore, but then
going on the web to check my hotmail account or even
attempting to get critical updates today, it happens over
and over again.

The antivirus did a complete scan and found nothing.

I have had to do the system restore all over again,
several times, once I attempt to connect to the internet
and visit/do anything at all.
Need some HELP please.

Thanks,
Michele.

You need to update your anti-virus definitions or get an anti-virus program
that works.

You have the much publicized SASSER Worm.

Visit the following website and use the steps there to remove this worm.
http://www3.telus.net/dandemar/sasser.htm

--
Ronnie Vernon
Microsoft MVP
Windows Shell/User

Please reply to the newsgroup so all may benefit.
http://www.dts-l.org
http://www.mvps.org

 

[Daniel Louwrens]

You have the MS blaster worm - firstly ensure your virus systems are up tho
date, secondly update your XP home to SP1, thirdly run a search on the MS
blaster worm there are a number of free removal tools from Symptac etc -
Phil

 

[MGGP]

A gold star and 1000 points for MR. Vernon . . . hopefully
the sasser questions are starting to taper off . . . I
think even the Pope knows about sasser by now . . .

 

[Kevin]

http://www.microsoft.com/security/incident/sasser.asp

Michele,
The above link will take you to the Microsoft site to download a fix for
your problem, the Sasser Worm. You should try to get to the Windows Update
site and make sure you have the latest critical updates. Good luck!

 

[NoNoBadDog!]

Congratulations!

Your system is infected with the much publicized Sasser worm. You allowed
yourself to become infected because of ALL of the following;

1. You have not updated your version of Windows.

2. You are not using an UP TO DATE antivirus program.

3. You connected to the internet without a firewall on your computer.

Until you correct ALL of the above situations, you will remain vulnerable to
infection not only by SASSER, but also by the thousands of other worms,
viruses, trojans, keyloggers, spyware, malware, etc.

Because you do not practice even the most basic level of computer security,
you are not only a threat to yourself but to the entire internet community.
When your machine is infected, it looks for other machines, owned by persons
like yourself who have poor computer security practices, to infect.

When the shutdown message appears, go START > Run and type in "shutdown -a"
(without the quotes), and hit the enter key. Go to the Microsoft update
website and download and install all critical patches. After rebooting, go
to the website of the company that makes your antivirus program and download
all the updates that are available. If your antivirus has expired, you must
purchase a new one.

Third, go to www.zonealarm.com and download the FREE firewall.

Keep your version of Windows updated. Always install any critical patches
that are posted to the Microsoft update website.

Keep you antivirus program up to date. New virus detection signatures are
released nearly on a daily basis, so this is something you should do every
day. Not once a month, or "when I have time", or "when I remember".

Once you have done these things, you will find your internet experience to
be much safer and happier.

Bobby

 

[Guest]

Sorry about my previous message i just read on to find somone else had said the same thing. Incase it happens again i suggest you make CMD program to abort the shutdown and keep it in a hand location for when needed. Open notepad and type 'shutdown.exe -a' and save as: (something).cmd when it is opened the shutdown will be cancelled

 

[Guest]

I am not the best person when it comes to technical problems but i have been looking into DOS and i found that both sassar and blast wormsshut down the same way. a box appears saying you have one minute to save all work and you cant close it.well you can using dos/cmd. go start > run (type cmd.exe

in command prompt type: shutdown.exe -

this wont remove the worms at all but it will abort the shutdown however.