Hi a_beatton
The lsass.exe, which is from Microsoft is located at
c:\windows\System32\lsass.exe. However, there's a few viruses that have been
found to run as lsass.exe to hide from you:
W32.HLLW.Lovgate.C@mm - Symantec Corporation
W32.Mydoom.L@mm - Symantec Corporation
W32.Nimos.Worm - Symantec Corporation
W32.Sasser.E.Worm (Lsasss.exe) - McAfee
With the sasser worm code count down you will see that the code given with
that symptom is almost always -1073741819 (which for the record would be
0xC0000005 -a much more common failure code indicating an unrecoverable page
fault
If you have access to another computer, go here and check here. Download all
the programs and burn them to a CD, then load them to yours. Follow the
instructions here. Jim Byrd is very knowledgeable in this area and well
respected in the MS and other NG communities. There appeares to be some
Windows Updates and patches that need to be reinstalled after the cleaning
process.
What You Should Know About the Sasser Worm and Its Variants
http://www.microsoft.com/security/incident/sasser.asp
MS Sasser Removal Tools: KB841720
(You will need to install the update released MS Security Bulletin MS04-011
to use this tool) Download the one for your machine from here:
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx
Then download the cleaning tool from here:
http://www.microsoft.com/downloads/...7e-1b6b-4fc3-90d4-9fa42d14cc17&DisplayLang=en
or
http://tinyurl.com/ywbw9
Then download the latest patches.
If these steps do not resolve your problem, please post back to this thread
with the details and any error messages.
Hope this helps
Jan
Smiles are meant to be shared,
that's why they're so contagious.
Please reply to the newsgroup so others may benefit.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm