lsass.exe consumes 99% of cpu

[Guest]

this is crazy...I boot my Win2k machine and it runs fine.
I'm at SP4. The minute I log onto my ISP (dialup)
lsass.exe starts consuming 95-100% of my cpu cycles
according to taskman, and brings my machine to its
knees.... I can log off the net, but lsass.exe still hogs
my machine until I shut it down and reboot. Any ideas????
THANKSPlease

 

[David H. Lipman]

Sounds the the Lovegate worm or the Mofei worm

Download and excute the McAfee worm removal tool, Stinger: http://vil.nai.com/vil/stinger/

Please read the following URLs and follow any instructions in them:
W32/MoFei.worm - http://vil.nai.com/vil/content/v_100357.htm
W32/Lovgate.a@M - http://vil.nai.com/vil/content/v_100085.htm

http://vil.nai.com/vil/content/v_100072.htm
http://vil.nai.com/vil/content/v_100183.htm
http://vil.nai.com/vil/content/v_100680.htm


Please report back your findings

Dave

PS: Follow-up set to: microsoft.public.security.virus



| this is crazy...I boot my Win2k machine and it runs fine.
| I'm at SP4. The minute I log onto my ISP (dialup)
| lsass.exe starts consuming 95-100% of my cpu cycles
| according to taskman, and brings my machine to its
| knees.... I can log off the net, but lsass.exe still hogs
| my machine until I shut it down and reboot. Any ideas????
| THANKSPlease

 

[Cal]

Thanks for the reply, David.

Unfortunately, that doesn't seem to be it. I downloaded
Stinger and ran it, but it didn't find anything, and the
symptoms are unaffected.

Any other suggestions??

Thanks!!!

Cal

-----Original Message-----
Sounds the the Lovegate worm or the Mofei worm

Download and excute the McAfee worm removal tool,

Stinger: http://vil.nai.com/vil/stinger/

 

[David H. Lipman]

Cal:

Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp) and/or Trend
(http://housecall.antivirus.com ) and perform and online scan of your platform and report
back your results.

This should rule out any other viruses.

Dave



| Thanks for the reply, David.
|
| Unfortunately, that doesn't seem to be it. I downloaded
| Stinger and ran it, but it didn't find anything, and the
| symptoms are unaffected.
|
| Any other suggestions??
|
| Thanks!!!
|
| Cal
|
| >-----Original Message-----
| >Sounds the the Lovegate worm or the Mofei worm
| >
| >Download and excute the McAfee worm removal tool,
| Stinger: http://vil.nai.com/vil/stinger/
| >
| >Please read the following URLs and follow any
| instructions in them:
| >W32/MoFei.worm -
| http://vil.nai.com/vil/content/v_100357.htm
| >W32/Lovgate.a@M -
| http://vil.nai.com/vil/content/v_100085.htm
| >
| >http://vil.nai.com/vil/content/v_100072.htm
| >http://vil.nai.com/vil/content/v_100183.htm
| >http://vil.nai.com/vil/content/v_100680.htm
| >
| >
| >Please report back your findings
| >
| >Dave
| >
| >PS: Follow-up set to: microsoft.public.security.virus
| >
| >
| >
| >| >| this is crazy...I boot my Win2k machine and it runs
| fine.
| >| I'm at SP4. The minute I log onto my ISP (dialup)
| >| lsass.exe starts consuming 95-100% of my cpu cycles
| >| according to taskman, and brings my machine to its
| >| knees.... I can log off the net, but lsass.exe still
| hogs
| >| my machine until I shut it down and reboot. Any
| ideas????
| >| THANKSPlease
| >
| >
| >.
| >

 

[Cal]

David,
this might be crossposted...I have NO cpu to load a page
online...much less do an online scan. Any other ideas?

-----Original Message-----
Cal:

Please go to McAfee

(http://www.mcafee.com/myapps/mfs/default.asp) and/or Trend

(http://housecall.antivirus.com ) and perform and online

scan of your platform and report

 

[Colin Bruce]

Have a look at this.
http://support.microsoft.com/default.aspx?scid=kb;en-us;831982


Hope this helps