HELP with a very strange terminator pop-up with Internet

[Doktorbombay]

Folks, I need help!.... I have a Dell Latitude that I run
Windows 2000 on; we use a free local dial-up for Internet
with the kids get on here under our guidance. Up until it
locked up while downloading a game, it was great for a
long time. Now, and it can be after 30 seconds connected,
it can be after 45 mintues after connected (usually
shorter), I get the following approx 2"x4" grey block with
a red circle and white "X" that says the
following: "INITIATED BY NT AUTHORITY\SYSTEM The system
process 'C:\winnt\system32\lsass.exe' termintated
unexpectantly with status code 128. The system will now
shut down and restart."

It then gives me a 60 second count down, and then it
restarts. WHAT A PAIN IN THE HIND QUARTERS!!! So how on
EARTH can I turn this annoying thing OFF???? I just
reformatted my HDD and reloaded Win2k, didn't work....
HELP ME PLEASE!!!!! Thanks.

 

[Steve]

Sounds like the blaster worm

you will need to patch the machine and clean it with a removal tool.
I would also advise cleaning and patching any other computers you may also
have
review the link

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html

patch available at

http://www.microsoft.com/downloads/...46-f541-4c15-8c9f-220354449117&displaylang=en

I would also get all the latest service packs and critical hotfixes from the
windows update site after you have cleaned the machine and applied the
blaster patch offline

http://windowsupdate.microsoft.com/

If you don't apply the patch and go back on to the internet then you will
probably get infected again

rgds
Steve

 

[Dave Patrick]

Answered in .general

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

| Folks, I need help!.... I have a Dell Latitude that I run
| Windows 2000 on; we use a free local dial-up for Internet
| with the kids get on here under our guidance. Up until it
| locked up while downloading a game, it was great for a
| long time. Now, and it can be after 30 seconds connected,
| it can be after 45 mintues after connected (usually
| shorter), I get the following approx 2"x4" grey block with
| a red circle and white "X" that says the
| following: "INITIATED BY NT AUTHORITY\SYSTEM The system
| process 'C:\winnt\system32\lsass.exe' termintated
| unexpectantly with status code 128. The system will now
| shut down and restart."
|
| It then gives me a 60 second count down, and then it
| restarts. WHAT A PAIN IN THE HIND QUARTERS!!! So how on
| EARTH can I turn this annoying thing OFF???? I just
| reformatted my HDD and reloaded Win2k, didn't work....
| HELP ME PLEASE!!!!! Thanks.

 

[webgurl]

It isn't Blaster or Sasser. It's SdBot, similar to both but not
variant. Here is a spec sheet on it.
http://www.f-secure.com/v-descs/sdbot_md.shtml
R

*Answered in .general

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

message
| Folks, I need help!.... I have a Dell Latitude that I run
| Windows 2000 on; we use a free local dial-up for Internet
| with the kids get on here under our guidance. Up until it
| locked up while downloading a game, it was great for a
| long time. Now, and it can be after 30 seconds connected,
| it can be after 45 mintues after connected (usually
| shorter), I get the following approx 2"x4" grey block with
| a red circle and white "X" that says the
| following: "INITIATED BY NT AUTHORITY\SYSTEM The system
| process 'C:\winnt\system32\lsass.exe' termintated
| unexpectantly with status code 128. The system will now
| shut down and restart."
|
| It then gives me a 60 second count down, and then it
| restarts. WHAT A PAIN IN THE HIND QUARTERS!!! So how on
| EARTH can I turn this annoying thing OFF???? I just
| reformatted my HDD and reloaded Win2k, didn't work....
| HELP ME PLEASE!!!!! Thanks.

-
webgur