Re: New Browser gives LSA Shell popup then freezes up

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Kaylene aka Taurarian (taurarian_at_REMOVE_CAPS_hotmail.com)
Date: 06/06/04 

Date: Mon, 7 Jun 2004 08:07:08 +1000

You may have the Sasser virus

Sasser:
Links about the virus:
http://www.microsoft.com/security/incident/sasser.asp
http://www.updatexp.com/sasser-worm.html
http://www3.telus.net/dandemar/sasser.htm

To stop shutdown, click Start, click Run and type: shutdown -a
then click OK.

Removal tools available here:-
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=125008
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html

For technical details on Sasser and manual steps to remove
http://www.microsoft.com/technet/security/alerts/sasser.mspx

<grnjns@webtv.net> wrote in message
news:28172-40C38D5A-250@storefull-3158.bay.webtv.net...
> New (used pc) with WindowsXP Professional. Finally got MSN8 and got
> online. I immediately get a pop-up saying I have a problem and that
> Windows will shut down and then come back up, but if I don't log off
> immediately it freezes up. Have run several AV programs, I assume I
> need the Windows updates but it shuts down within a minute.
>
> Two Questions:
>
> Since I did not buy the WindowsXP Professional and do not have the disc,
> (it came installed), can I get the free update disc from MSN?
>
> Any tips on what I can do?
>
> Tom Greene
>

Relevant Pages

  • Re: shutting down
    ... Trafton - I'm mistaken. ... I'm not sure where I got the idea that shutdown -a didn't work with Sasser, ... For Windows 2000 there's an alternative ...
    (microsoft.public.scripting.virus.discussion)
  • Re: Lsass.exe error status code 1073741819
    ... system does an auto shutdown displaying above ... Sounds like you have the Sasser worm. ... Oh, and if you're running Windows XP, download the critical updates ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: virus/worm......need to transfer data...pls help
    ... so you CANNOT GET INTO WINDOWS TO RUN ... > Most likely a Sasser infection. ...
    (microsoft.public.win2000.general)
  • Sasser Virus!!!
    ... I had the sasser virus, which is bad enough, but I can't ... I've used the microsoft download, ... updated windows a few times, ... shutdown a- - but is there any way to eliminate it ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: sasser mass mailing virus and lsass.exe
    ... remove the "Sasser Worm" from your computer: ... Carey Frisch ... Windows XP - Shell/User ... | I have the sasser virus and i used nortons av to get rid of it but lsass.exe ...
    (microsoft.public.windowsxp.perform_maintain)