Error Code 1073741819

[Shegens]

A friend brought her laptop to me because she was getting this system
shutdown message. She never updates her virus scanner or Windows so
the first thing I did was download the Windows Update file for the
Blaster virus. I installed it and also downloaded all of her virus
updates and installed them. I got the latest version of Stinger and
ran it. In all I found and removed three worms and one virus, none of
which was Blaster or Sasser. I reconnected the laptop to the Internet
and still get the system shutdown error message. I can't find anymore
viruses on the laptop. Is there something else that will cause this
error message and shutdown? Her laptop has WindowsXP Professional.

Thanks!

 

[Bert Kinney]

Hi,

Symantec Security Response - W32.Sasser Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

Lsass.exe Quits Unexpectedly with Status Code -1073741819:
http://support.microsoft.com/kb/300038

 

[Rock]

A friend brought her laptop to me because she was getting this system
shutdown message. She never updates her virus scanner or Windows so
the first thing I did was download the Windows Update file for the
Blaster virus. I installed it and also downloaded all of her virus
updates and installed them. I got the latest version of Stinger and
ran it. In all I found and removed three worms and one virus, none of
which was Blaster or Sasser. I reconnected the laptop to the Internet
and still get the system shutdown error message. I can't find anymore
viruses on the laptop. Is there something else that will cause this
error message and shutdown? Her laptop has WindowsXP Professional.

Thanks!

For viruses, start with Trend Micro’s Sysclean. Download it and the
signature file. Turn off system restore, boot into safe mode and run
sysclean. Boot back into normal mode and run a full AV scan with your
normal AV program. Then turn system restore back on.

Trend Micro Sysclean
http://www.trendmicro.com/download/dcs.asp

Trend Micro Signature File
http://www.trendmicro.com/download/pattern.asp

You should also regularly run at least two of these online scans in
addition to your regular up to date AV program:

Online and Downloadable Virus Scanning:

Panda ActiveScan
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Bit Defender Online Virus Scan:
http://www.bitdefender.com/scan/license.php

Symantec Online Virus and Security Scan:
http://security.symantec.com/ssc/home.asp

TrendMicro:
http://housecall.trendmicro.com/housecall/start_corp.asp

McAfee Online Virus Scan:
http://www.mcafee.com/myapps/mfs/default.asp

RAV AntiVirus - Scan Online
http://www.ravantivirus.com/scan/

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

Run these programs to check for spyware/malware. After installing
update them, then boot into safe mode and run them. You should update
and run them weekly.

Cwshredder
http://www.intermute.com/spysubtract/cwshredder_download.html

Ad-aware SE
http://www.lavasoftusa.com

Spybot Search and Destroy
http://www.safer-networking.org

Bazooka Adware and Spyware Scanner
http://download.com.com/3000-2144-10247783.html

Pest Patrol Free Pest Scanner
http://www.pestscan.com/ScanOrTrial.asp

If you’re still having problems after running these then run HijackThis
and post the log to one of the specialty forums, _NOT_ this one.

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

 

[Shegens]

I booted up in Safe Mode and ran BlasterFix and SasserFix and neither
one was found. I then installed the Trend Micro Sysclean and
Signature File and ran it in Safe Mode. Nothing was found by that
either. It reported no viruses. I'm re-running the regular virus
program now but I really don't think there is anything to find.
That's why I can't figure out why I still get the shutdown message.
After this scan finishes I'll try to run Housecall. BTW, shutting
down System Restore was the first thing I did.

 

[S.Sengupta]

http://support.microsoft.com/default.aspx?scid=kb;EN-US;306497

regards,
ssg MS-MVP

 

[Rock]

I booted up in Safe Mode and ran BlasterFix and SasserFix and neither
one was found. I then installed the Trend Micro Sysclean and
Signature File and ran it in Safe Mode. Nothing was found by that
either. It reported no viruses. I'm re-running the regular virus
program now but I really don't think there is anything to find.
That's why I can't figure out why I still get the shutdown message.
After this scan finishes I'll try to run Housecall. BTW, shutting
down System Restore was the first thing I did.

Good luck and post back with the results.

 

[Shegens]

Since I posted last, I downloaded Ad-Aware to my computer and copied
it to a CD to install in the laptop. The first scan showed 130
incidents of Malware. I located the two programs that were associated
with the Malware entries and removed them. I ran another scan and
came up with 84 so I removed all of them. This morning I'm going to
hook the laptop up to my satellite connection and see if it will surf.
I'll have to install my USB ethernet software and hardware but that
won't take long. I figure with the fast connection I might make more
progress if the problem is still there. She uses Neandertech ISP
service at my recommendation and I might remove the standalone dialer
for that and set up the Windows connection to it instead. I could
have a problem with the ISP dialer.

 

[Shegens]

I think I got it! After removing all the Malware and the programs
associated with them I put the laptop on the satellite connection and
installed the new Windows Update software. When I scanned for updates
it said she needed 23 critical security updates. I downloaded and
installed all of them without any problems at all. I'll take the
computer to my daughter's house this afternoon and put it on dialup
and see how it does. Thanks for all the help!

 

[Bert Kinney]

Hi,

Here are a couple more removal tools that should also be run.
CWShredder: http://aumha.org/freeware/freeware.php#cwshred

Spybot: http://www.safer-networking.org/

SpywareBlaster:
http://www.wilderssecurity.net/spywareblaster.html
SpywareBlaster doesn't scan and clean for spyware - it
prevents it from ever being installed. SpywareBlaster is
a non memory resident utility. It works by setting a "kill bit"
for the CLSIDs of spyware ActiveX controls, it prevents the
installation of any of them from a webpage.

 

[Shegens]

Thanks Bert. I'll run them and install the SpywareBlaster on her
laptop. She's very computer illiterate and needs utilities that run
themselves.

 

[Bert Kinney]

Spywareblaster can be updated manually, or for a very small price it
will update automatically.
No Windows system should be without it.

 

[Rock]

I think I got it! After removing all the Malware and the programs
associated with them I put the laptop on the satellite connection and
installed the new Windows Update software. When I scanned for updates
it said she needed 23 critical security updates. I downloaded and
installed all of them without any problems at all. I'll take the
computer to my daughter's house this afternoon and put it on dialup
and see how it does. Thanks for all the help!

Great, glad you got it worked out and thanks for posting back.