System Shut Down

[John]

Hi, My friend has a problem with her computer shutting
down when she is online.There is an error message that
reads: The system process c:windows\system 32\lsass.exe
terminated unexpectedly with status code:1073741819.And
will shut down.
There's also a 60 second timer and something about,NT
AUTHORITY/SYSTEM.Any help would be great.Thanks,John

 

[Eric Cross [MVP]]

Greetings John,

It appears your computer has been infected with the Blaster virus. For more
information and how to fix this, please see following links:

What You Should Know About the Blaster Worm and Its Variants
http://www.microsoft.com/security/incident/blast.asp

Blaster removal tool:
http://www.microsoft.com/downloads/...8b-fe98-493f-ad76-bf673a38b4cf&displaylang=en

_________________
Eric Cross, MS-MVP (Windows Networking)

 

[Marc Liron - MVP]

If this has only just started in the last few days it may
be the NEW sasser worm, or one of the variants.

This page has more information on this worm and how to
patch your system

http://www.updatexp.com/sasser-worm.html

Kind Regards

Marc Liron
Microsoft MVP
http://www.updatexp.com

 

[Guest]

Hi Eric and thanks,I'm still getting the shut down.I
downloaded the patch,but it didn't work.Before the shut
down I'm also getting a message that the"LSA Shell(Export
Version) needs to shut down.I hope this helps,John

 

[Eric Cross [MVP]]

John, did you try what Marc suggested?

It might be the new Sasser worm. For more information and how to fix this,
please see the following links.

What You Should Know About the Sasser Worm and Its Variants
http://www.microsoft.com/security/incident/sasser.asp

Sasser removal tool:
http://www.microsoft.com/downloads/...7E-1B6B-4FC3-90D4-9FA42D14CC17&displaylang=en

_________________
Eric Cross, MS-MVP (Windows Networking)

 

[John]

Thanks Marc and Eric for your help.It turned out to be
the Sasser Worm.The computer has been running online for
40 minutes now,looks good.