M/S Sasser patch made things worse, need fix for fix

K

Kenneth Dunn

Probably got the sasser worm, i.e., "winnt\system32
\lsass.exe". . .shut down in 1 minute. . .status code
128. . ."
Down loaded the M/S Sasser fix, followed Steps
1. disconnect form Interner
2. mitigate the vunerability
3. skipped Improve system Performance
4. skipped Enable Firewall
5. I reconnected to internet
6. I Installed the required update
7. Then when I tried to reboot for step 7 I got the BSOD
with "stop C0000135 {unable to locate dll} winsrv could
not be found in specified path default load path"

What happened in step 6 and how do I fix it?

Kenneth Dunn
Cleveland, OH
 
A

Alan Illeman

Kenneth Dunn said:
Probably got the sasser worm, i.e., "winnt\system32
\lsass.exe". . .shut down in 1 minute. . .status code
128. . ."
Down loaded the M/S Sasser fix, followed Steps
1. disconnect form Interner
2. mitigate the vunerability
3. skipped Improve system Performance
4. skipped Enable Firewall
5. I reconnected to internet
6. I Installed the required update
7. Then when I tried to reboot for step 7 I got the BSOD
with "stop C0000135 {unable to locate dll} winsrv could
not be found in specified path default load path"

What happened in step 6 and how do I fix it?

Kenneth Dunn
Cleveland, OH

What happened in step 4? Without your firewall enabled you're
just asking for more trouble.
 
M

Mark Brown[MSFT]

|
| | > Probably got the sasser worm, i.e., "winnt\system32
| > \lsass.exe". . .shut down in 1 minute. . .status code
| > 128. . ."
| > Down loaded the M/S Sasser fix, followed Steps
| > 1. disconnect form Interner
| > 2. mitigate the vunerability
| > 3. skipped Improve system Performance
| > 4. skipped Enable Firewall
| > 5. I reconnected to internet
| > 6. I Installed the required update
| > 7. Then when I tried to reboot for step 7 I got the BSOD
| > with "stop C0000135 {unable to locate dll} winsrv could
| > not be found in specified path default load path"
| >
| > What happened in step 6 and how do I fix it?
| >
| > Kenneth Dunn
| > Cleveland, OH
|
| What happened in step 4? Without your firewall enabled you're
| just asking for more trouble.
|
|
|

Hello,

There are 2 issues here.

1. There are PnP drivers that are stuck in an infinite loop and this is
what is causing this issue.
Please refer to this article.
http://support.microsoft.com/default.aspx?scid=kb;en-us;841382


2. Also as a test, also found in this article....

WORKAROUND
To work around this problem if you use the Nortel Networks VPN client,
disable the IPSec Policy Agent service from Safe Mode or from the Recovery
Console.

Note This problem may occur if other drivers or services do not load
successfully. This workaround is specific to the Nortel Networks VPN client
drivers.

To disable the IPSec Policy Agent service from Safe Mode
Restart your computer.
-When you receive the "Please select the operating system to start"
message, press F8.
-Select safemode, press ENTER, and then press ENTER at the operating system
selection page.
-Click Start, click Run, type compmgmt.msc /s, and then click OK.
-In the Computer Management console, expand Services and Applications,
click Services, and then double-click IPSec Policy Agent.
-Click Services, and then, on the General tab, click Disabled as the
Startup type.
-Click OK, and then restart your computer.

To disable the IPSec Policy Agent service from Recovery Console
-Either insert the Windows 2000 startup disk in the floppy disk drive, or
insert the Windows 2000 CD-ROM in the CD-ROM drive or the DVD-ROM drive,
and then restart the computer.
-Click to select any options that are required to start the computer from
the CD-ROM drive or the DVD-ROM drive if you are prompted to do so.
-At the Setup screen, press R to repair the installation, and then press C
to start Recovery Console.
If you have a dual-boot or a multiple-boot computer, select the
installation that you want to access from the Recovery Console.

-Type the administrator password.

If the administrator password is blank, press ENTER.
-At the command prompt, type disable policyagent to disable the IPSec
Policy Agent service.
-To exit the Recovery Console, type exit at the command prompt, and then
press ENTER.
-Restart your computer.

Please let me know....

~~ Mark Brown ~~
~ Performance Support Specialist,
~ Microsoft Enterprise Platforms Support
~ This posting is provided "AS IS" with no warranties, and confers no
rights.
~ Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
~ Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top