problems with lsass.exe error

[Guest]

Everytime I dial up an error from the lsass.exe file automatically shuts my machine down

How can I fix it?

 

[hushia]

Everytime I dial up an error from the lsass.exe file automatically shuts my machine down.

How can I fix it?

https://www.microsoft.com/security/incident/sasser.asp

 

[Will Denny]

Hi

Unfortunately your system has been infected by the Sasser Worm. See the
following links:

"What You Should Know About the Sasser Worm and Its Variants"
http://www.microsoft.com/security/incident/sasser.asp

"How to protect your PC"
http://www.microsoft.com/security/protect/

--

Will Denny
MS-MVP Windows - Shell/User


| Everytime I dial up an error from the lsass.exe file automatically shuts
my machine down.
|
| How can I fix it?

 

[Guest]

Will Denny

I saw another post of yours that referred to 2 .exe files. I looked in "processes" and there was Isass.exe
How can I have the worm if I successfully downloaded the windows update for it, before April 30 (as it states in the microsoft security article)?? I searched for the exe file, nothing came up. I virus-scanned for the exe file, nothing. But it still is listed in my processes. I don't know what to look for
How can I remove it if my system doesn't detect it


Ok, I haven't had any problems (that I know of)

 

[grahamilton]

lsass.exe is the Security Accounts Manager service, it is a legitimate part
of the operating system, the Sasser worm exploits this service. If you
have scanned for virus using the latest virus defination and have the
KB835732 patch installed you should have nothing to worry aboot.

Will Denny,

I saw another post of yours that referred to 2 .exe files. I looked in

"processes" and there was Isass.exe.

How can I have the worm if I successfully downloaded the windows update

for it, before April 30 (as it states in the microsoft security article)??
I searched for the exe file, nothing came up. I virus-scanned for the exe
file, nothing. But it still is listed in my processes. I don't know what to
look for.

 

[Will Denny]

Hi

If you following the links I posted, you will find the necessary tools to
check for the Sasser Worm. Keeping your AV program up to date with the
latest definitions will also prevent this 'nastie' from infecting your
system.

If all users enabled a firewall of some kind and set Windows Update to
'Auto' - a lot of these needless infections could been prevented.

--

Will Denny
MS-MVP Windows - Shell/User


| Will Denny,
|
| I saw another post of yours that referred to 2 .exe files. I looked in
"processes" and there was Isass.exe.
| How can I have the worm if I successfully downloaded the windows update
for it, before April 30 (as it states in the microsoft security article)??
I searched for the exe file, nothing came up. I virus-scanned for the exe
file, nothing. But it still is listed in my processes. I don't know what to
look for.
| How can I remove it if my system doesn't detect it?
|
|
|
| Ok, I haven't had any problems (that I know of)

 

[Bruce Chambers]

Greetings --

You've apparently contracted the latest worm, W32.Sasser.Worm,
specifically designed to attack people who do not update their
computers promptly and who do not practice "safe hex." In other
words, like Blaster, this worm was developed and distributed _after_ a
patch for the vulnerability was announced and made publicly available.
Further, and also like Blaster, this worm could not affect any
computer whose user had taken the basic precaution of using a properly
configured firewall.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH