Major problems....

[Vanessa]

Ok, everything was fine, but all of the sudden just a
little bit ago, I connected the internet, and shortly
after something popped up and said that "LSA Shell (Export
Version)" was shutting down. so I clicked ok. Then another
thing popped up and said something about the computer was
going to shutdown and it had a clock that was counting
down. All the information I could write down was "NT
Authority\System" and "C:\Windows\system32\Isass.exe" and
it had the numbers "-1073741849" listed somewhere in
there. Can anyone help with this? Sorry I can't provide
any more information....

 

[Carey Frisch [MVP]]

How to Remove the "Sasser Worm" from your Computer:
http://www3.telus.net/dandemar/sasser.htm

[Courtesy of MS-MVP Jupiter Jones]

I would strongly recommend installing Service Pack 2
for Windows XP after removing the Sasser worm:

Windows XP Service Pack 2 (Direct Download):
http://www.microsoft.com/downloads/...be-3b8e-4f30-8245-9e368d3cdb5a&displaylang=en

Windows XP Service Pack 2 Checklist
http://www3.telus.net/dandemar/spackins.htm

[Courtesy of MS-MVP Jupiter Jones]

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

---------------------------------------------------------------------------

:

| Ok, everything was fine, but all of the sudden just a
| little bit ago, I connected the internet, and shortly
| after something popped up and said that "LSA Shell (Export
| Version)" was shutting down. so I clicked ok. Then another
| thing popped up and said something about the computer was
| going to shutdown and it had a clock that was counting
| down. All the information I could write down was "NT
| Authority\System" and "C:\Windows\system32\Isass.exe" and
| it had the numbers "-1073741849" listed somewhere in
| there. Can anyone help with this? Sorry I can't provide
| any more information....

 

[Guest]

W32.Sasser Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

Spyware/Virus Removal and Prevention:
http://www.fixyourwindows.com/windowsxpsolutions.htm
(Links to online virus scans on the same page)

How to successfully install Windows XP Service Pack 2:
http://www.fixyourwindows.com/winxpsp2install.htm

Hope this helps!

 

[Bruce Chambers]

Ok, everything was fine, but all of the sudden just a
little bit ago, I connected the internet, and shortly
after something popped up and said that "LSA Shell (Export
Version)" was shutting down. so I clicked ok. Then another
thing popped up and said something about the computer was
going to shutdown and it had a clock that was counting
down. All the information I could write down was "NT
Authority\System" and "C:\Windows\system32\Isass.exe" and
it had the numbers "-1073741849" listed somewhere in
there. Can anyone help with this? Sorry I can't provide
any more information....

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed after a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next Shutdown countdown begins. This will abort the shut down. Also,
make sure you've enabled a firewall before starting, to preclude any
more intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH