lsass error

[mark]

hi i was wondering if anyone could help me i have tried
connecting to the internet and after about 2 minutes a
error message comes up sayin lsass has failed and my
computer restarts does anyone know how to fix this
problem could you please send reply to my email as i can
check that from another computer the error message number
is 1073714819 thanks a lot for any help

(e-mail address removed)

 

[Carey Frisch [MVP]]

Apparently, your PC has suffered a major security breech and is now
infected with malware (i.e. "a viral worm") because:

1. The latest Windows XP Critical Updates have not been installed......
2. The PC's firewall has not been properly enabled.....
3. Out-of-date or no antivirus program has been installed......

If you have Sasser, follow these directions to remove it from your computer:
http://www3.telus.net/dandemar/sasser.htm

[Courtesy of MS-MVP Jupiter Jones]


What You Should Know About the Sasser Worm and Its Variants
http://www.microsoft.com/security/incident/sasser.asp

W32.Sasser.B.Worm Critical Information
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html

W32.Sasser Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

3 Steps to Help Ensure your PC is Protected
http://www.microsoft.com/security/protect/

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/security/protect/antivirus.asp

Special note if you use AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html


--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

----------------------------------------------------------------------------------


| hi i was wondering if anyone could help me i have tried
| connecting to the internet and after about 2 minutes a
| error message comes up sayin lsass has failed and my
| computer restarts does anyone know how to fix this
| problem could you please send reply to my email as i can
| check that from another computer the error message number
| is 1073714819 thanks a lot for any help
|
| (e-mail address removed)

 

[kurttrail]

hi i was wondering if anyone could help me i have tried
connecting to the internet and after about 2 minutes a
error message comes up sayin lsass has failed and my
computer restarts does anyone know how to fix this
problem could you please send reply to my email as i can
check that from another computer the error message number
is 1073714819 thanks a lot for any help

(e-mail address removed)

And once you clean up the Sasser Worm, expect a lot more junk email too!
NEVER post to the USENET with you real email address.

--
Peace!
Kurt
Self-anointed Moderator
microscum.pubic.windowsexp.gonorrhea
http://microscum.com
"Trustworthy Computing" is only another example of an Oxymoron!
"Produkt-Aktivierung macht frei!"

 

[t.cruise]

All the links have good information. Too add: You should run a firewall,
which even without the Microsoft patches for Sasser and Blaster would keep
you from being vulnerable. Windows XP comes with its own firewall, which I
suppose is better than nothing. But, you can download the free standard
version of Zone Alarm, which will serve you well.
--

T.C.
t__cruise@[NoSpam]hotmail.com
Remove [NoSpam] to reply

Apparently, your PC has suffered a major security breech and is now
infected with malware (i.e. "a viral worm") because:

1. The latest Windows XP Critical Updates have not been installed......
2. The PC's firewall has not been properly enabled.....
3. Out-of-date or no antivirus program has been installed......

If you have Sasser, follow these directions to remove it from your computer:
http://www3.telus.net/dandemar/sasser.htm

[Courtesy of MS-MVP Jupiter Jones]


What You Should Know About the Sasser Worm and Its Variants
http://www.microsoft.com/security/incident/sasser.asp

W32.Sasser.B.Worm Critical Information
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.ht
ml

W32.Sasser Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.t
ool.html

3 Steps to Help Ensure your PC is Protected
http://www.microsoft.com/security/protect/

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/security/protect/antivirus.asp

Special note if you use AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html


--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-------------------------------------------------------------------------- --------


| hi i was wondering if anyone could help me i have tried
| connecting to the internet and after about 2 minutes a
| error message comes up sayin lsass has failed and my
| computer restarts does anyone know how to fix this
| problem could you please send reply to my email as i can
| check that from another computer the error message number
| is 1073714819 thanks a lot for any help
|
| (e-mail address removed)

 

[Lilian]

Sorry, in such a case it's essential to format.

Courtesy of spanish MVPs:

From: "JM Tella Llop [MVP Windows]" <[email protected]>
Subject: Re: Pregunta tonta acerca de LSA
Date: Sun, 2 May 2004 20:37:18 +0200
Message-ID: <#[email protected]>
Newsgroups: microsoft.public.es.windowsxp

se aconseja formatear y tomar las precauciones dadas aquí:
it is advised to format and to take the precautions given
here
http://www.vsantivirus.com/02-05-04.htm

From: "Enrique [MVP Windows]" <[email protected]>
Subject: Re: Pregunta tonta acerca de LSA
Date: Sun, 2 May 2004 20:38:22 +0200
Message-ID: <#[email protected]>
Newsgroups: microsoft.public.es.windowsxp

Pues ahora se trata del virus/troyano W32/Sasser. Mismo
método que el Blaster: formatear.
Is the virus/troyano W32/Sasser. Same method that the
Blaster: to format.

 

[Crusty \(-: Old B@stard :-\)]

Suggest you turn on the TV and watch the news. How can you NOT know?

--
Regards:

Richard Urban

aka Crusty (-: Old B@stard

 

[Janus]

Sorry, in such a case it's essential to format.

Courtesy of spanish MVPs:

From: "JM Tella Llop [MVP Windows]" <[email protected]>
Subject: Re: Pregunta tonta acerca de LSA
Date: Sun, 2 May 2004 20:37:18 +0200
Message-ID: <#[email protected]>
Newsgroups: microsoft.public.es.windowsxp

se aconseja formatear y tomar las precauciones dadas aquí:
it is advised to format and to take the precautions given
here
http://www.vsantivirus.com/02-05-04.htm

From: "Enrique [MVP Windows]" <[email protected]>
Subject: Re: Pregunta tonta acerca de LSA
Date: Sun, 2 May 2004 20:38:22 +0200
Message-ID: <#[email protected]>
Newsgroups: microsoft.public.es.windowsxp

Pues ahora se trata del virus/troyano W32/Sasser. Mismo
método que el Blaster: formatear.
Is the virus/troyano W32/Sasser. Same method that the
Blaster: to format.

-----Original Message-----
All the links have good information. Too add: You should run a firewall,
which even without the Microsoft patches for Sasser and Blaster would keep
you from being vulnerable. Windows XP comes with its own firewall, which I
suppose is better than nothing. But, you can download the free standard
version of Zone Alarm, which will serve you well.
--

T.C.
t__cruise@[NoSpam]hotmail.com
Remove [NoSpam] to reply

Apparently, your PC has suffered a major security breech and is now
infected with malware (i.e. "a viral worm") because:

1. The latest Windows XP Critical Updates have not been installed......
2. The PC's firewall has not been properly enabled.....
3. Out-of-date or no antivirus program has been installed......

If you have Sasser, follow these directions to remove

it from your
computer:

http://www3.telus.net/dandemar/sasser.htm

[Courtesy of MS-MVP Jupiter Jones]


What You Should Know About the Sasser Worm and Its Variants
http://www.microsoft.com/security/incident/sasser.asp

W32.Sasser.B.Worm Critical Information
http://securityresponse.symantec.com/avcenter/venc/data/w3 2.sasser.b.worm.ht
ml

W32.Sasser Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w3 2.sasser.removal.t
ool.html

3 Steps to Help Ensure your PC is Protected
http://www.microsoft.com/security/protect/

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/security/protect/antivirus.asp

Special note if you use AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html


--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

--------------------------------------------------------

------------------

--------


| hi i was wondering if anyone could help me i have tried
| connecting to the internet and after about 2 minutes a
| error message comes up sayin lsass has failed and my
| computer restarts does anyone know how to fix this
| problem could you please send reply to my email as i can
| check that from another computer the error message number
| is 1073714819 thanks a lot for any help
|
| (e-mail address removed)

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.676 / Virus Database: 438 - Release Date: 5/3/2004


.

 

[Guest]

Mark, I am having the SAME exact problem. If you find a
solution please email it to me. I will do the same for
you.
Thanks!

(e-mail address removed)

 

[Guest]

This is the sasser worm!

More at:

http://www.sasser-worm.com

Marc Liron
Microsoft MVP
http://www.updatexp.com


----- (e-mail address removed) wrote: -----

Mark, I am having the SAME exact problem. If you find a
solution please email it to me. I will do the same for
you.
Thanks!

(e-mail address removed)

 

[Bruce Chambers]

Greetings --

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed _after_ a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Bruce Chambers]

Greetings --

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed _after_ a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Steve N.]

Sorry, you are wrong. Please quit giving this stupid advice.
Reformatting will teach you NOTHING and you will still have a vulnerable
system until it is patched.

Steve

Sorry, in such a case it's essential to format.

Courtesy of spanish MVPs:

From: "JM Tella Llop [MVP Windows]" <[email protected]>
Subject: Re: Pregunta tonta acerca de LSA
Date: Sun, 2 May 2004 20:37:18 +0200
Message-ID: <#[email protected]>
Newsgroups: microsoft.public.es.windowsxp

se aconseja formatear y tomar las precauciones dadas aquí:
it is advised to format and to take the precautions given
here
http://www.vsantivirus.com/02-05-04.htm

From: "Enrique [MVP Windows]" <[email protected]>
Subject: Re: Pregunta tonta acerca de LSA
Date: Sun, 2 May 2004 20:38:22 +0200
Message-ID: <#[email protected]>
Newsgroups: microsoft.public.es.windowsxp

Pues ahora se trata del virus/troyano W32/Sasser. Mismo
método que el Blaster: formatear.
Is the virus/troyano W32/Sasser. Same method that the
Blaster: to format.

-----Original Message-----
All the links have good information. Too add: You

should run a firewall,

which even without the Microsoft patches for Sasser and

Blaster would keep

you from being vulnerable. Windows XP comes with its own

firewall, which I

suppose is better than nothing. But, you can download

the free standard

version of Zone Alarm, which will serve you well.
--

T.C.
t__cruise@[NoSpam]hotmail.com
Remove [NoSpam] to reply


message

Apparently, your PC has suffered a major security

breech and is now

been installed......

installed......

it from your

computer:

http://www3.telus.net/dandemar/sasser.htm

[Courtesy of MS-MVP Jupiter Jones]


What You Should Know About the Sasser Worm and Its

Variants

http://www.microsoft.com/security/incident/sasser.asp

W32.Sasser.B.Worm Critical Information

http://securityresponse.symantec.com/avcenter/venc/data/w3

2.sasser.b.worm.ht

ml

W32.Sasser Removal Tool

http://securityresponse.symantec.com/avcenter/venc/data/w3

2.sasser.removal.t

ool.html

3 Steps to Help Ensure your PC is Protected
http://www.microsoft.com/security/protect/

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/security/protect/antivirus.asp

Special note if you use AOL:

America Online installs its own connection settings

that override

Windows XP's

downloading

message:

| hi i was wondering if anyone could help me i have

tried

| connecting to the internet and after about 2 minutes a
| error message comes up sayin lsass has failed and my
| computer restarts does anyone know how to fix this
| problem could you please send reply to my email as i

can

| check that from another computer the error message

number

| is 1073714819 thanks a lot for any help
|
| (e-mail address removed)

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.676 / Virus Database: 438 - Release Date:
5/3/2004

.

[/QUOTE]

 

[Peggy]

All good info, however, obviously the Windows XP firewall
has obviously fallen, even with the most recent updates.
Don't trust Windows programs to protect you.....if
Windows is corrupt...everything else is too!

Good luck....I hope you get the worm out of yours before
it shuts you down completely as it has mine.

 

[t.cruise]

I got good advice at the Norton site: CTRL+ALT+DELETE brings up the Task
Manager, on the Processes tab select avserve2, click the End Process button,
that will stop Sasser long enough for you to download and run the removal
tool at:

http://www.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

The removal tool gets rid of the worm (files and registry values). Disable
System Restore to flush all Restore Points which might have the worm. Upon
reboot, enable System Restore again. I agree that a firewall that's better
than the one included with Windows XP is a good idea. Zone Alarm, the FREE
standard version works fine for me. But, I would advise going to:

http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

and manually downloading and installing the security update for your version
of Windows for protection against Sasser and similar worms. If you have a
decent firewall, that should protect you, but it won't hurt to have the
added protection of this security patch.

 

[Guest]

Peggy, if you can get on-line at all try to get to www.spywareinfo.com. I put a post in there in the virus forum and got exceptional step by step help after 3 weeks of frustration. Have been virus free since then. I have no idea what you have for virus protection but I got rid of Norton and installed AVG and SpyBot and today added Zone Alarm. There are good, caring people in the forums. Good Luck