Isass.exe terminated unexpectedly with status code 128

[Guest]

We have 4 Windows 2000 Pro computers with all MS fixes and latest Symantec AV that are shutting down at random. None of these computers were hit by the Sasser Worm but all of this started yesterday. I have scanned repeatedly with the latest Symantec defs and find nothing. There was an error message on one of the machines before shutdown that read: " The system process 'C:\WINNT\system32\Isass.exe' terminated unexpectedly with status code 128. The system will now shutdown and restart." Have you heard anything from anyone else that might help

 

[Marina Roos [SBS-MVP]]

Check again. You are hit by sasser. Go to www.sophos.com and get the
removaltool.

--
Regards,

Marina
Microsoft SBS-MVP

We have 4 Windows 2000 Pro computers with all MS fixes and latest Symantec

AV that are shutting down at random. None of these computers were hit by the
Sasser Worm but all of this started yesterday. I have scanned repeatedly
with the latest Symantec defs and find nothing. There was an error message
on one of the machines before shutdown that read: " The system process
'C:\WINNT\system32\Isass.exe' terminated unexpectedly with status code 128.
The system will now shutdown and restart." Have you heard anything from
anyone else that might help?

 

[Karl Levinson [x y] mvp]

Download and use MBSA free from www.microsoft.com/technet/security It
really sounds pretty certain that the MS04-011 patch was not installed or
did not install correctly.

We have 4 Windows 2000 Pro computers with all MS fixes and latest Symantec

AV that are shutting down at random. None of these computers were hit by the
Sasser Worm but all of this started yesterday. I have scanned repeatedly
with the latest Symantec defs and find nothing. There was an error message
on one of the machines before shutdown that read: " The system process
'C:\WINNT\system32\Isass.exe' terminated unexpectedly with status code 128.
The system will now shutdown and restart." Have you heard anything from
anyone else that might help?

 

[Karl Levinson [x y] mvp]

PS check your firewall to confirm it is blocking what you think it is
blocking, particularly for TCP port 445 and the other ports mentioned in the
MS04-011 article at www.microsoft.com/technet/security

We have 4 Windows 2000 Pro computers with all MS fixes and latest Symantec

AV that are shutting down at random. None of these computers were hit by the
Sasser Worm but all of this started yesterday. I have scanned repeatedly
with the latest Symantec defs and find nothing. There was an error message
on one of the machines before shutdown that read: " The system process
'C:\WINNT\system32\Isass.exe' terminated unexpectedly with status code 128.
The system will now shutdown and restart." Have you heard anything from
anyone else that might help?