Install Difficulties - XP Pro

[mwdcanuck]

I just formatted and installed XP Pro to my "D" (Slave)
Drive. I have left my Master Drive "C" as it was with
W.98se and all of my old software intact. I installed PRO
using NTFS filing system and have yet to activate it. The
format and install seemed to go without a problem. Now
when I reboot, my computer quickly gives me a choice of
rebooting using XP Pro or W.98se even though I did nothing
to set it up as a dual boot process. If I select to boot
in W98se it boots into my "C" Drive and everything
functions properly. It does not recognize my "D" drive
presumeably because it cannot recognize the NTFS filing
system. If I select to boot in XP Pro it appears to boot
normally and I expected to be able to start reloading all
of my old software onto my "D" Drive with XP Pro and
eventually set it as my default boot drive in a dual boot
setup. The problem is that the XP Pro will only run for a
few minutes before going into a System Shutdown with the
following message: "This shudown was initiated by NT
AUTHORITY\SYSTEM - Message: The system
process 'D:WINDOWS\system32\lsass.exe terminated
unexpectedly with status code - 1073741819. The system
then does a shut down and restarts itself and I must again
select XP Pro or W98se. The 98 runs O.K. and the XP
results in another shut down. How do I remedy this?

 

[Carey Frisch [MVP]]

Visit the following website and use the procedure to
remove the "Sasser Worm" from your computer:
http://www3.telus.net/dandemar/sasser.htm

[Courtesy of MS-MVP Jupiter Jones]

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

------------------------------------------------------------------------------------------


|I just formatted and installed XP Pro to my "D" (Slave)
| Drive. I have left my Master Drive "C" as it was with
| W.98se and all of my old software intact. I installed PRO
| using NTFS filing system and have yet to activate it. The
| format and install seemed to go without a problem. Now
| when I reboot, my computer quickly gives me a choice of
| rebooting using XP Pro or W.98se even though I did nothing
| to set it up as a dual boot process. If I select to boot
| in W98se it boots into my "C" Drive and everything
| functions properly. It does not recognize my "D" drive
| presumeably because it cannot recognize the NTFS filing
| system. If I select to boot in XP Pro it appears to boot
| normally and I expected to be able to start reloading all
| of my old software onto my "D" Drive with XP Pro and
| eventually set it as my default boot drive in a dual boot
| setup. The problem is that the XP Pro will only run for a
| few minutes before going into a System Shutdown with the
| following message: "This shudown was initiated by NT
| AUTHORITY\SYSTEM - Message: The system
| process 'D:WINDOWS\system32\lsass.exe terminated
| unexpectedly with status code - 1073741819. The system
| then does a shut down and restarts itself and I must again
| select XP Pro or W98se. The 98 runs O.K. and the XP
| results in another shut down. How do I remedy this?

 

[Zer0Cool]

when u setup a dual boot machine, win xp has to b the
first os to b installed, and it might also have to b the
master, i would try backing up what ever u want to keep,
then setup ur system in such a way that ur primary
master, and selected boot drive are the windows xp drive,
and the win98se is ur slave drive, u can then go into win
xp and i think goto my comp properties and adjust that
boot option screen in POST as far as time duration to
make choice, default selection ect. i did this about 2
years ago, there is a microsoft article in there knowlege
base that give u a more precise explanation of how to
setup dual boot machines, just search "dual boot" under a
win xp lookup...hope this helps

 

[Guest]

Thanks for the suggestion Carey but when checking the
Telus site it is specific that the "error message is
about 'LSASS.EXE' and specifically rules out 'lsass.exe'.
According to that, my error message is not Sasser worm
related. Would appreciate further comments from you or
others in this regard if you disagree.
Appreciated, mwdcanuck.

 

[mwdcanuck]

Thanks Zer0Cool - not quite sure how to to do the 'POST'
thing but will do some research and cross my fingers. I
would still like to know what the error message means
according to microsoft so still looking for answers in
that regard.

 

[Bruce Chambers]

Greetings --

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed _after_ a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Mike]

If Win 98/se/me is already installed, loading XP onto a separate partition
or drive will automatically set up dual boot

 

[Guest]

Thanks Bruce: it is hard to believe that I could get
infected in such a short time after installing XP. I have
since downloaded the appropriate security patch from MS
along with another 16 critical updates for my new XP. Also
downloaded spybot, spyblaster, avg anti-virus and
zonealarm firewall freeware and tightened things up as
best I know how. All seems to be in order again.
Again I thank you along with a couple of others that
assisted. mwdcanuck.

 

[Guest]

mwd canuck here again Carey. You were right it was
sasser.worm and I have since remedied things and secured
my system much better. Hard to believe I could get
infected within hours of installing XP and before I had
downloaded critical updates, firewall, anti-virus etc.
Much thanks, mwdcanuck.

 

[Bruce Chambers]

Greetings --

You're welcome. It only takes a few seconds of exposure to become
infected.


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH