lsass.exe

[jacques]

I get an error code 1073741819 indicating that my system
will shut down because of C\\windows\system32\lsass.exe. I
am trying to upgrade to XP pro from Windows 98.
This has been identified as a Win 2000 problem, but I can
not find anything about XP?
Further my system shuts down 5 minutes after the boot, and
I can not get to the internet to download updates.
Any suggestions?

 

[Carey Frisch [MVP]]

It appears your PC is infected with the Sasser worm.

How to Remove the "Sasser Worm" from your Computer:
http://www3.telus.net/dandemar/sasser.htm

[Courtesy of MS-MVP Jupiter Jones]

I would strongly recommend installing Service Pack 2
for Windows XP after removing the Sasser worm.

You may wish to view the following:

Top 10 Reasons to Install Windows XP Service Pack 2 (SP2)
http://www.microsoft.com/windowsxp/sp2/topten.mspx

List of fixes included in Windows XP Service Pack 2
http://support.microsoft.com/default.aspx?scid=kb;en-us;811113&Product=windowsxpsp2

Learn About Windows XP Service Pack 2
http://www.microsoft.com/windowsxp/sp2/preinstall.mspx

What to Know Before You Download and Install Windows XP Service Pack 2
http://www.microsoft.com/windowsxp/sp2/sp2_whattoknow.mspx

Windows XP Service Pack 2 (Direct Download):
http://www.microsoft.com/downloads/...be-3b8e-4f30-8245-9e368d3cdb5a&displaylang=en

Windows XP Service Pack 2 Checklist
http://www3.telus.net/dandemar/spackins.htm

[Courtesy of MS-MVP Jupiter Jones]

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

----------------------------------------------------------------------------

:

| I get an error code 1073741819 indicating that my system
| will shut down because of C\\windows\system32\lsass.exe. I
| am trying to upgrade to XP pro from Windows 98.
| This has been identified as a Win 2000 problem, but I can
| not find anything about XP?
| Further my system shuts down 5 minutes after the boot, and
| I can not get to the internet to download updates.
| Any suggestions?

 

[Jacques]

Thanks for the reply, howver, I like to know why this did
not happen or did not show on Win 98SE?

-----Original Message-----
It appears your PC is infected with the Sasser worm.

How to Remove the "Sasser Worm" from your Computer:
http://www3.telus.net/dandemar/sasser.htm

[Courtesy of MS-MVP Jupiter Jones]

I would strongly recommend installing Service Pack 2
for Windows XP after removing the Sasser worm.

You may wish to view the following:

Top 10 Reasons to Install Windows XP Service Pack 2 (SP2)
http://www.microsoft.com/windowsxp/sp2/topten.mspx

List of fixes included in Windows XP Service Pack 2
http://support.microsoft.com/default.aspx?scid=kb;en- us;811113&Product=windowsxpsp2

Learn About Windows XP Service Pack 2
http://www.microsoft.com/windowsxp/sp2/preinstall.mspx

What to Know Before You Download and Install Windows XP Service Pack 2
http://www.microsoft.com/windowsxp/sp2/sp2_whattoknow.mspx

Windows XP Service Pack 2 (Direct Download):
http://www.microsoft.com/downloads/details.aspx? familyid=049c9dbe-3b8e-4f30-8245-
9e368d3cdb5a&displaylang=en

Windows XP Service Pack 2 Checklist
http://www3.telus.net/dandemar/spackins.htm

[Courtesy of MS-MVP Jupiter Jones]

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.a spx

----------------------------------------------------------

------------------

:

| I get an error code 1073741819 indicating that my system
| will shut down because of C\\windows\system32 \lsass.exe. I
| am trying to upgrade to XP pro from Windows 98.
| This has been identified as a Win 2000 problem, but I can
| not find anything about XP?
| Further my system shuts down 5 minutes after the boot, and
| I can not get to the internet to download updates.
| Any suggestions?
.

 

[Carey Frisch [MVP]]

The Saaser worm targets computers running Windows XP
that do not have XP's firewall enabled. It does not target
computers running Windows 98. Installing SP2 for Windows
XP will prevent this vulnerability. SP2 installs a firewall
that is enabled by default.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

----------------------------------------------------------------------------

:

| Thanks for the reply, howver, I like to know why this did
| not happen or did not show on Win 98SE?

 

[NoNoBadDog!]

This should be amended to read that SASSER attacks a computer that is
running Windows XP and does not have *ANY* firewall installed. The firewall
provided in Windows SP2 is woefully inadequate and there are other options
available that provide much greater protection. The best firewall is Norton
Personal Firewall, but if you are looking for a good free firewall,
ZoneAlarm is a good one. Do not think that using the firewall in SP2 is
protecting you, as it will be a false sense of security.

Bobby

 

[Bruce Chambers]

I get an error code 1073741819 indicating that my system
will shut down because of C\\windows\system32\lsass.exe. I
am trying to upgrade to XP pro from Windows 98.
This has been identified as a Win 2000 problem, but I can
not find anything about XP?
Further my system shuts down 5 minutes after the boot, and
I can not get to the internet to download updates.
Any suggestions?

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed after a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next Shutdown countdown begins. This will abort the shut down. Also,
make sure you've enabled a firewall before starting, to preclude any
more intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having
both at once. - RAH