System shutting down

[Bill]

All of a sudden I am getting system shut downs by
NTAUTHORITY\SYSTEM. The error message says lsass.exe
terminated unexpectedly with status code 1073741819.
This has happened repeatedly over the last 24 hours, but
not before. Can anyone help?

 

[MAP]

-----Original Message-----
All of a sudden I am getting system shut downs by
NTAUTHORITY\SYSTEM. The error message says lsass.exe
terminated unexpectedly with status code 1073741819.
This has happened repeatedly over the last 24 hours, but
not before. Can anyone help?
.

Sorry,but you have one of the new viruses,I don't know
which one.

Anti-Virus sites
<http://www.symantec.com>
<http://www.pandasoftware.com>
<http://www.trendmicro.com>
<http://www.mcafee.com>
<http://www.sophos.com>

 

[Rick \Nutcase\ Rogers]

Hi Bill,

This is the sasser worm, please see:

http://vil.nai.com/vil/content/v_125007.htm
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SASSER.A

Details on the patch needed to prevent it:

http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Windows
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Malke]

All of a sudden I am getting system shut downs by
NTAUTHORITY\SYSTEM. The error message says lsass.exe
terminated unexpectedly with status code 1073741819.
This has happened repeatedly over the last 24 hours, but
not before. Can anyone help?

Sounds like you've gotten caught by the Sasser worm. Here's the link to
information:

http://www.sarc.com/avcenter/venc/data/w32.sasser.worm.html

Get the worm off your system and then immediately patch XP:

http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

Malke

 

[Tech guy]

The virus is this one

W32.Sasser.Worm is a worm that attempts to exploit the
MS04-011 vulnerability. It spreads by scanning randomly-
chosen IP addresses for vulnerable systems.