ISASS.exe

[patti]

I recently upgraded Windows ME to Windows XP
Professional. Everything worked fine for about two days.
Then whenever I tried connecting to the internet, I
received a message "LSA Shell (Export Version) encountered
a problem and needed to close." Then it started a
countdown and shut my computer off. Has anyone had this
problem and if so, how do you fix it?

 

[R. McCarty]

Virus infection - Due to a lack of Microsoft Critical updates &
sufficient Anti-Virus protection. Please read through the postings
on this group that address security repairs tools & procedures.
The Internet is an inherently dangerous place and an unprotected
computer is like being a sheep among the wolves.

 

[Ronnie Vernon MVP]

I recently upgraded Windows ME to Windows XP
Professional. Everything worked fine for about two days.
Then whenever I tried connecting to the internet, I
received a message "LSA Shell (Export Version) encountered
a problem and needed to close." Then it started a
countdown and shut my computer off. Has anyone had this
problem and if so, how do you fix it?

Your computer has been infected with the Sasser Worm.

What You should Know about the Sasser Worm and its Variants.
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011.
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

--
Ronnie Vernon
Microsoft MVP
Windows Shell/User

Please reply to the newsgroup so all may benefit.
http://www.dts-l.org
http://www.mvps.org

 

[Ken Blake, MVP]

In

I recently upgraded Windows ME to Windows XP
Professional. Everything worked fine for about two days.
Then whenever I tried connecting to the internet, I
received a message "LSA Shell (Export Version) encountered
a problem and needed to close." Then it started a
countdown and shut my computer off. Has anyone had this
problem and if so, how do you fix it?

Many thousands of people have experienced this problem. You have
the famous Sasser worm, which you got by running without a
firewall, and by not installing the Microsoft critical updates.

First go to Start | Run and type shutdown -a

That will stop it from shutting down.

Then read here:

http://vil.nai.com/vil/content/v_125007.htm
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SASSER.A
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx
http://www.microsoft.com/security/incident/sasser.asp

 

[Bruce Chambers]

Greetings --

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed _after_ a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall. It only takes a few milliseconds of exposure.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next Shutdown countdown begins. This will abort the shut down. Also,
make sure you've enabled a firewall before starting, to preclude any
more intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH