c:\WINNT\System32\lsass.exe' terminated code 128

G

Gus Perry

After logging on to AT&T Worldnet Website and trying to
download their Accelerator software, half way through the
download I get this message "c:\WINNT\System32\lsass.exe"
terminated system will shutdown and restart. Code 128.
How can this be corrected.

Gus
 
E

Erie Jim

Welcome to the Sasser Worm! Microsoft has a free tool to
remove it on the website. Also, if you have XP System
Restore, turn it off before you run the tool then turn it
back on. I had to run the tool a couple of times to get
rid of Sasser.

Good luck.
Erie Jim
 
R

Richard G. Harper

CAUSE: Sasser Worm.

CURE: Disconnect from the network/Internet. From a known-clean computer,
download the following patch:

http://www.microsoft.com/downloads/...9E-DA3F-43B9-A4F1-AF243B6168F3&displaylang=en

and download this tool:

http://www.microsoft.com/downloads/...7E-1B6B-4FC3-90D4-9FA42D14CC17&displaylang=en

Apply the Sasser patch, then run the cleaning tool to get rid of the active
infection, before connecting to the Internet/network again.

Finally, re-evaluate your patching habits and antivirus protection as both
are in need of attention from you.
 
N

NoNoBadDog!

Congratulations!



Your system is infected with the much publicized Sasser worm. You have
allowed
yourself to become infected because of ALL of the following;


1. You have not updated your version of Windows.

2. You are not using an UP TO DATE antivirus program.

3. You connected to the internet without a firewall on your computer.

Until you correct ALL of the above situations, you will remain vulnerable to
infection not only by SASSER, but also by the thousands of other worms,
viruses, trojans, keyloggers, spyware, malware, etc.

Because you do not practice even the most basic level of computer security,
you are not only a threat to yourself but to the entire internet community.
When your machine is infected, it looks for other machines, owned by persons
like yourself who have poor computer security practices, to infect.

First, disconnect from the network.


When the shutdown message appears, go START > Run and type in "shutdown -a"
(without the quotes), and hit the enter key.

Download the Windows critical update and the SASSER removal tool.here are
the

links..



Security Update:



http://www.microsoft.com/downloads/...9E-DA3F-43B9-A4F1-AF243B6168F3&displaylang=en





and the SASSER removal Tool:



http://www.microsoft.com/downloads/...7E-1B6B-4FC3-90D4-9FA42D14CC17&displaylang=en


After rebooting, go to the website of the company that makes your antivirus
program and download all the updates that are available. If your antivirus
has expired, you must
purchase a new one.
Third, go to www.zonealarm.com and download the FREE firewall.
Keep your version of Windows updated. Always install any critical patches
that are posted to the Microsoft update website.

Keep you antivirus program up to date. New virus detection signatures are
released nearly on a daily basis, so this is something you should do every
day. Not once a month, or "when I have time", or "when I remember".

Once you have done these things, you will find your internet experience to
be much safer and happier.


Bobby
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top