problems with lsass.exe error

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Everytime I dial up an error from the lsass.exe file automatically shuts my machine down

How can I fix it?
 
Will Denny

I saw another post of yours that referred to 2 .exe files. I looked in "processes" and there was Isass.exe
How can I have the worm if I successfully downloaded the windows update for it, before April 30 (as it states in the microsoft security article)?? I searched for the exe file, nothing came up. I virus-scanned for the exe file, nothing. But it still is listed in my processes. I don't know what to look for
How can I remove it if my system doesn't detect it


Ok, I haven't had any problems (that I know of)
 
lsass.exe is the Security Accounts Manager service, it is a legitimate part
of the operating system, the Sasser worm exploits this service. If you
have scanned for virus using the latest virus defination and have the
KB835732 patch installed you should have nothing to worry aboot.





JanV said:
Will Denny,

I saw another post of yours that referred to 2 .exe files. I looked in
Click to expand...
"processes" and there was Isass.exe.
How can I have the worm if I successfully downloaded the windows update
Click to expand...
for it, before April 30 (as it states in the microsoft security article)??
I searched for the exe file, nothing came up. I virus-scanned for the exe
file, nothing. But it still is listed in my processes. I don't know what to
look for.
 
Hi

If you following the links I posted, you will find the necessary tools to
check for the Sasser Worm. Keeping your AV program up to date with the
latest definitions will also prevent this 'nastie' from infecting your
system.

If all users enabled a firewall of some kind and set Windows Update to
'Auto' - a lot of these needless infections could been prevented.

--

Will Denny
MS-MVP Windows - Shell/User


| Will Denny,
|
| I saw another post of yours that referred to 2 .exe files. I looked in
"processes" and there was Isass.exe.
| How can I have the worm if I successfully downloaded the windows update
for it, before April 30 (as it states in the microsoft security article)??
I searched for the exe file, nothing came up. I virus-scanned for the exe
file, nothing. But it still is listed in my processes. I don't know what to
look for.
| How can I remove it if my system doesn't detect it?
|
|
|
| Ok, I haven't had any problems (that I know of)
 
Greetings --

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed _after_ a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
Back
Top