LSA Shell (Export Version)

[Guest]

Can anyone tell me what a LSA Shell is?As soon as Windows loads I get a error box with the message that it needs to close> I have restored my computer to a previous point and that worked for awhile, but it is back again

 

[Kaylene aka Taurarian]

Sounds like Sasser virus
Links about the virus:
http://www.microsoft.com/security/incident/sasser.asp
http://www.updatexp.com/sasser-worm.html
http://www3.telus.net/dandemar/sasser.htm

To stop shutdown, click Start, click Run and type: shutdown –a
then click OK.

Removal tools available here:-
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=125008
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html

For technical details on Sasser and manual steps to remove
http://www.microsoft.com/technet/security/alerts/sasser.mspx

Can anyone tell me what a LSA Shell is?As soon as Windows loads I get a error

box with the message that it needs to close> I have restored my computer to a
previous point and that worked for awhile, but it is back again

 

[Will Denny]

Hi

Unfortunately your system has been infected by the Sasser Worm. See the
following links:

"What You Should Know About the Sasser Worm and Its Variants"
http://www.microsoft.com/security/incident/sasser.asp

"How to protect your PC"
http://www.microsoft.com/security/protect/

--

Will Denny
MS-MVP Windows - Shell/User


| Sounds like Sasser virus
| Links about the virus:
| http://www.microsoft.com/security/incident/sasser.asp
| http://www.updatexp.com/sasser-worm.html
| http://www3.telus.net/dandemar/sasser.htm
|
| To stop shutdown, click Start, click Run and type: shutdown –a
| then click OK.
|
| Removal tools available here:-
| http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=125008
|
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html
|
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html
|
| For technical details on Sasser and manual steps to remove
| http://www.microsoft.com/technet/security/alerts/sasser.mspx
|
|
|
| | > Can anyone tell me what a LSA Shell is?As soon as Windows loads I get a
error
| box with the message that it needs to close> I have restored my computer
to a
| previous point and that worked for awhile, but it is back again
|

 

[Ken Blake, MVP]

In

Can anyone tell me what a LSA Shell is?As soon as Windows loads I get
a error box with the message that it needs to close> I have restored
my computer to a previous point and that worked for awhile, but it is
back again

You have the Sasser worm.

First go to Start | Run and type shutdown -a

That will stop it from shutting down.

Then read here:

http://vil.nai.com/vil/content/v_125007.htm
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SASSER.A
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx
http://www.microsoft.com/security/incident/sasser.asp