Re: Unsolicited Computer Reboot

From: Carey Frisch [MVP] (mrxp2004_at_nospamyahoo.com)
Date: 05/04/04 

Date: Tue, 4 May 2004 10:45:04 -0500

Apparently, your PC has suffered a major security breech and is now
infected with Malware ("The Sasser Worm") because:

1. The latest Windows XP Critical Updates have apparently not been installed......
2. The PC's firewall apparently has not been properly enabled.....
3. Out-of-date or no AntiVirus program has been installed......

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

Follow these directions to remove The Sasser Worm from your computer:
http://www3.telus.net/dandemar/sasser.htm

[Courtesy of MS-MVP Jupiter Jones]

What You Should Know About the Sasser Worm and Its Variants
http://www.microsoft.com/security/incident/sasser.asp

PSS Security Response Team Alert - Sasser Worm and Variants
http://www.microsoft.com/technet/Security/alerts/sasser.mspx

W32.Sasser.B.Worm Critical Information
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html

W32.Sasser Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

3 Steps to Help Ensure your PC is Protected
http://www.microsoft.com/security/protect/

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/security/protect/antivirus.asp

Special note if you use AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html

Consider purchasing a top-notch Internet Security program
that will help protect your PC from future viruses, hackers, and
privacy threats:
http://www.symantec.com/sabu/nis/nis_pe/ 

-- 
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Be Smart!  Protect your PC!
http://www.microsoft.com/security/protect/
---------------------------------------------------------------------------
"Mike Karr" <karrmp@earthlink.net> wrote in message:
 news:815201c431eb$1ec29240$a501280a@phx.gbl...
| My computer has started shutting down and rebooting, 
| quoting "NT AUTHORITY/SYSTEM" as the source, and 
| showing "C:\WINDOWS\system32\Isass.exe" and a status code 
| of 1073741819.  It seems to only shut down while I am on 
| line.  I need some help trying to resolve this issue, and 
| don't know whether to contact my ISP or Microsoft.

Relevant Pages

  • Re: LSA Shell Export
    ... The latest Windows XP Critical Updates have apparently not been installed...... ... Follow these directions to remove The Sasser Worm from your computer: ... PSS Security Response Team Alert - Sasser Worm and Variants ... the ones that come with Windows XP. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Shut down
    ... The latest Windows XP Critical Updates have apparently not been installed...... ... Follow these directions to remove The Sasser Worm from your computer: ... PSS Security Response Team Alert - Sasser Worm and Variants ... the ones that come with Windows XP. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Lsass.exe
    ... The latest Windows XP Critical Updates have apparently not been installed...... ... Follow these directions to remove The Sasser Worm from your computer: ... PSS Security Response Team Alert - Sasser Worm and Variants ... the ones that come with Windows XP. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: lsass
    ... The latest Windows XP Critical Updates have apparently not been installed...... ... Follow these directions to remove The Sasser Worm from your computer: ... PSS Security Response Team Alert - Sasser Worm and Variants ... the ones that come with Windows XP. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: (RPC) Remote Procedure Call Unexpected Termination
    ... >>As you all know Microsoft's Windows XP Professional has ... >Download stinger, the stinger tool helps in detecting ... >What You Should Know About the Sasser Worm and Its ... >Microsoft Security Bulletin MS04-011 ...
    (microsoft.public.windowsxp.help_and_support)
Loading