Re: lsass.exe termination error

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Cari \(MS MVP\) (Newsgroups1_at_coribright.com)
Date: 08/25/04 

Date: Tue, 24 Aug 2004 22:30:19 -0700

There's another one of these in xp.accessability. You would have thought
they'd have learned by now! I'll leave it for you, your write up is so
good! 

-- 
Cari (MS-MVP Windows Client - Printing, Imaging & Hardware)
www.coribright.com
"NoNoBadDog!" <mypants_bjsledgeATpixi.com> wrote in message 
news:u25vZ6liEHA.3348@TK2MSFTNGP12.phx.gbl...
> Lets see....
>
> 1. You connected to the internet without enabling the Windows firewall.
>
> 2.  You also have no antivirus software installed.
>
> 3.  You did not update your version of windows...if you had, the patch to 
> prevent infection from the SASSER worm would have been on your system 
> (it's been available for months).
>
>   The reason that your machine is infected is because of all of the above. 
> You must educate yourself on basic computer security.
>
> Here's what you need to do now, in this exact order...
>
> 1. Disconnect the computer from the internet...If you have broadband, 
> physically disconnect the cable from the back of the computer.
>
>
> 2. Turn the computer on.  When the message appears, 
> START>Run>'Shutdown -a"
>
> 3.  Enable the windows firewall.  It is very rudimentary as firewalls go, 
> but it is better than nothing.
>
> 4.  Install a reputable Antivirus program.  You will have to update it 
> after re-connecting to the internet, and thereafter you MUST KEEP IT 
> UPDATED.
>
> 5.  Connect to the internet.
>
> 6.  Update your antivirus software.
>
> 7. Run a scan and let the antivirus software will clean your system.
>
> 8.  Connect to Windows Update and download ALL Critical downloads. 
> Install them.  You may have to repeat this more than once in order to 
> download and install all Critical Updates.
>
> 9.  Never, ever connect to the internet, even briefly, without having met 
> all of the above requirements.
>
>   You not only allowed you machine to be infected, but you turned it into 
> a tool that is/was looking for other unprotected computers to connect.  It 
> has been recently announced that an unprotected computer can be infected 
> in as little as 40 seconds.
>
>   I would venture a bet that your computer has more than just the latest 
> variant of the SASSER worm.
>
>   Once you begin to practice basic computer security, you can become a 
> responsible "netizen"
>
> Bobby
>

Relevant Pages

  • Re: |WINDOWSsystem32lsass.exe exception
    ... You also have no antivirus software installed. ... >prevent infection from the SASSER worm would have been on ... Install a reputable Antivirus program. ... >re-connecting to the internet, and thereafter you MUST ...
    (microsoft.public.windowsxp.general)
  • Re: Downloaded program installed second "Explorer"
    ... Unplug the cable that connects your computer to the internet and start ... and your modem driver if you have a winmodem that loads its driver at ... Buy some decent antivirus software such as Norton Antivirus or McAfee ... Install it and connect to the internet to ...
    (microsoft.public.security)
  • Re: Help
    ... You may have spyware/adware infesting your machine, ... (Scan for updates, Review and Install) ... to have something running like antivirus software - and it prevents browser ... Empty your Temporary Internet Files and shrink the size it stores to about ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: XP Restarts when on line
    ... > this shutdown was initiated by NTAUTHORITY\SYSTEM ... (Scan for updates, Review and Install) ... to have something running like antivirus software - and it prevents browser ... Empty your Temporary Internet Files and shrink the size it stores to about ...
    (microsoft.public.windowsxp.general)
  • Re: System shutdown
    ... Did you just stop it and install the patch, or did you clean up your ... Know that even if you have the normal updates for Norton, ... to have something running like antivirus software - and it prevents browser ... Empty your Temporary Internet Files and shrink the size it stores to about ...
    (microsoft.public.windowsxp.general)