lsass.exe terminated

[Rick]

When trying to join a web conference, I received the
following error message: "c:\windows\system32\lsass.exe
terminated unexpectedly with status code 1073741819."
Then the system shut down and restarted. Now anytimme I
try to connect to the internet I get the same message and
the system restarts. I have a dial-up internet
connection with MSN as my ISP. I am running Windows XP
Home edition. This is the first time I tried to join a
web conference. Any ideas on how to correct my problem
would be appreciated.

 

[Kenrick Fu]

Your computer is infected with a new Sasser worm exploiting the LSASS Buffer
Overrun Vulnerability.

To clean your system:

NOTE: If your system keeps restarting, you can abort the system shut down
by:
Click Start, click Run and type "shutdown -a" (without quotations),
then click OK.

1. Download the worm removal tool from
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

2. Download and install the critical update IMMEDIATELY from
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

 

[Rick \Nutcase\ Rogers]

Hi,

This is the sasser worm, please see:

http://vil.nai.com/vil/content/v_125007.htm
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SASSER.A

Details on the patch needed to prevent it:

http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Windows
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Malke]

When trying to join a web conference, I received the
following error message: "c:\windows\system32\lsass.exe
terminated unexpectedly with status code 1073741819."
Then the system shut down and restarted. Now anytimme I
try to connect to the internet I get the same message and
the system restarts. I have a dial-up internet
connection with MSN as my ISP. I am running Windows XP
Home edition. This is the first time I tried to join a
web conference. Any ideas on how to correct my problem
would be appreciated.

Sounds like you've gotten caught by the Sasser worm. Here's the link to
information:

http://www.sarc.com/avcenter/venc/data/w32.sasser.worm.html

Get the worm off your system and then immediately patch XP:

http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

Malke