lsa shell (export version)

[steph]

when starting to launch windows i get the following
messaging appearing

LSA SHELL (EXPORT VERSION)
C:\DOCUMEN1\DEFAULT\LOCALS\TEMP\WER1.TMP.DIR000
\LASS.EXE.MDMP
C:\DOCUMEN1\DEFAULT\LOCALS\TEMP\WER1.TMP.DIR000
\APPCOMPAT.TXT


I ignore this and i've tried then to open IE, which
initally works.
Then when I try to access another website I get
c:\windows\system32\lass.exe status code 1073741819
terminated unexpectedly
and shuts down.
Can anyone help?

 

[Kaylene aka Taurarian]

Could be Sasser Virus
Sasser:
Links about the virus:
http://www.microsoft.com/security/incident/sasser.asp
http://www.updatexp.com/sasser-worm.html
http://www3.telus.net/dandemar/sasser.htm

To stop shutdown, click Start, click Run and type: shutdown -a
then click OK.

Removal tools available here:-
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=125008
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html

For technical details on Sasser and manual steps to remove
http://www.microsoft.com/technet/security/alerts/sasser.mspx