Re: 10 XP machines shut down at same time.

From: Malke (malke_at_nospoonnotreally.com)
Date: 02/22/05 

Date: Tue, 22 Feb 2005 09:19:12 -0800

gandalf625 wrote:

> I've checked for all the virus' and they are clean. Have Norton
> Corporate
> Edition Anti-virus. Definitions are up-to-date. Also downloaded and
> ran the
> fixes for Sasser, etc ( didn't find any of the virus'). My experience
> with
> these virus' is that it doesn't wait a week or two to occur again.
> And what is really confusing me is that all 10 do it at the same time,
> within seconds of each other.
>
> "John Harris" wrote:
>
>> The lsass.exe which is from Microsoft is located at
>> c:\windows\System32\lsass.exe . There's a few viruses that have been
>> found to run as lsass.exe to hide from you.
>>
>>
>> W32.HLLW.Lovgate.C@mm - Symantec Corporation
>> W32.Mydoom.L@mm - Symantec Corporation
>> W32.Nimos.Worm - Symantec Corporation
>> W32.Sasser.E.Worm (Lsasss.exe) - McAfee
>>
>> lsass.exe is a Windows System File and should be in a system
>> directory. If it is then this application is safe.
>>
>>
>>
Since all the machines do it at the same time, there must be something
running that is causing it. It is too much of a coincidence that they
all shut down at the same time. What do those 10 machines have in
common? What makes them different from your other computers? I'm afraid
this is one of those times when only hands-on troubleshooting will do.
Be very methodical in your t-shooting - work on one machine, isolated,
at a time. Or else if time is of the essence, just flatten the systems
and reimage the drives.

Malke 

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"

Relevant Pages

  • Re: F-Secure problems
    ... protection. ... machines so I uninstalled it. ... On one of our computers if left a 104MB file ... Treat it as you would a virus - have a look in msconfig's startup and services sections, ...
    (alt.comp.anti-virus)
  • Re: New Virus released, can anyone help identify it?
    ... >plus 20 servera t my colo facility nailed with a new ... Virus sacns are not picking it up, ... >LSESS.EXE the machines apper to run fine. ... We have the same problem, 50 computers went down, and it looks like ...
    (microsoft.public.win2000.security)
  • Re: 10 XP machines shut down at same time.
    ... Sound slike flattening them is the best option right now. ... >> I've checked for all the virus' and they are clean. ... > Since all the machines do it at the same time, ... What makes them different from your other computers? ...
    (microsoft.public.windowsxp.general)
  • Frogs gotta virus
    ... French fighter planes were unable to take off after military computers ... were infected by a computer virus, ... the French navy admitted that during the time it took to ...
    (soc.culture.thai)
  • Re: XP has no significant bugs that any significant number of users want fixed
    ... >> It does not take a Harvard Graduate to create and propagate a virus. ... >> or virus free computers. ... >the germs will remain one step ahead of those working to combat them. ... >paralyzes new product development and the furtherment of human technology ...
    (sci.electronics.design)
Loading