Isass.exe terminated unexpectedly with status code 128

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

We have 4 Windows 2000 Pro computers with all MS fixes and latest Symantec AV that are shutting down at random. None of these computers were hit by the Sasser Worm but all of this started yesterday. I have scanned repeatedly with the latest Symantec defs and find nothing. There was an error message on one of the machines before shutdown that read: " The system process 'C:\WINNT\system32\Isass.exe' terminated unexpectedly with status code 128. The system will now shutdown and restart." Have you heard anything from anyone else that might help
 
Check again. You are hit by sasser. Go to www.sophos.com and get the
removaltool.

--
Regards,

Marina
Microsoft SBS-MVP

Joe said:
We have 4 Windows 2000 Pro computers with all MS fixes and latest Symantec
Click to expand...
AV that are shutting down at random. None of these computers were hit by the
Sasser Worm but all of this started yesterday. I have scanned repeatedly
with the latest Symantec defs and find nothing. There was an error message
on one of the machines before shutdown that read: " The system process
'C:\WINNT\system32\Isass.exe' terminated unexpectedly with status code 128.
The system will now shutdown and restart." Have you heard anything from
anyone else that might help?
 
Download and use MBSA free from www.microsoft.com/technet/security It
really sounds pretty certain that the MS04-011 patch was not installed or
did not install correctly.


Joe said:
We have 4 Windows 2000 Pro computers with all MS fixes and latest Symantec
Click to expand...
AV that are shutting down at random. None of these computers were hit by the
Sasser Worm but all of this started yesterday. I have scanned repeatedly
with the latest Symantec defs and find nothing. There was an error message
on one of the machines before shutdown that read: " The system process
'C:\WINNT\system32\Isass.exe' terminated unexpectedly with status code 128.
The system will now shutdown and restart." Have you heard anything from
anyone else that might help?
 
PS check your firewall to confirm it is blocking what you think it is
blocking, particularly for TCP port 445 and the other ports mentioned in the
MS04-011 article at www.microsoft.com/technet/security


Joe said:
We have 4 Windows 2000 Pro computers with all MS fixes and latest Symantec
Click to expand...
AV that are shutting down at random. None of these computers were hit by the
Sasser Worm but all of this started yesterday. I have scanned repeatedly
with the latest Symantec defs and find nothing. There was an error message
on one of the machines before shutdown that read: " The system process
'C:\WINNT\system32\Isass.exe' terminated unexpectedly with status code 128.
The system will now shutdown and restart." Have you heard anything from
anyone else that might help?
 
Back
Top