forced log off

  • Thread starter Thread starter mikepanter
  • Start date Start date
M

mikepanter

Please help me if you can.
I am running XP Home, which I have recently upgraded to
from windows 98se, when I go online after around 3 mins a
message comes up as -: The system
process 'c:\windows\system32\lsass.exe' Terminated
unexpectedly with status code 1073741819.
NT AUTHORITY\SYSTEM.
Would anyone be able to help me fix this anoying
problem? Hope to here from someone soon. Thanks Mike
 
Sounds like you've been infected by the Sasser worm or variant therof. This
means you didn't apply Windows Updates (at least not very recently - patch
for this came out April 13) and don't have a firewall enabled....

If you can't stop your computer from restarting:

As soon as your computer reboots and Windows loads, click Start, then Run.
In the box, type the following:

shutdown -a (then click OK)

Then see http://www.microsoft.com/security/incident/sasser.asp and
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

McAfee's Stinger tool to remove Sasser: http://vil.nai.com/vil/stinger/

MS removal tool for Windows 2000 SP2 and up, or Windows XP:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

Enable your XP firewall (or get a third party one if not on XP or even if
so - www.zonealarm.com has a free one) and run Windows Update regularly to
keep your OS patched to the gills. You also need good antivirus software and
need to keep it updated regularly. As mentioned, the patch for this exploit
was released April 13th...but there are plenty you do need. Perhaps want to
enable the autoupdate feature of Windows Update and subscribe to the
security bulletin announcements at www.microsoft.com/security.

Also - note that posting your valid e-mail address in a newsgroup post, or
in your news account settings, is a surefire way to get spam and SWEN and
other viruses sent to you....see http://www.mailmsg.com/SPAM_munging.htm for
help in the future, but note that now that your address is out there,
there's not much you can do other than changing your address.
 
Back
Top