lsass.exe terminated unexpectedly

  • Thread starter Thread starter Rick
  • Start date Start date
R

Rick

Hello,

I'm running Win2K Server and have been receiving an error
message that my system will be shut down and restarted
because lsass.exe has terminated unexpectedly. This
usually happens after several minutes after connection to
the internet is established. I ran a full vrus scan but
no viruses were found. I downloaded and installed service
pack 4 but that didn't seem to work. I also attempted to
download updates from the Windows Update site but have
been unable to because this error shuts down and restarts
my system. Any ideas would be appreciated. Thanks!!!
 
Hello,

I'm running Win2K Server and have been receiving an error
message that my system will be shut down and restarted
because lsass.exe has terminated unexpectedly. This
usually happens after several minutes after connection to
the internet is established. I ran a full vrus scan but
no viruses were found. I downloaded and installed service
pack 4 but that didn't seem to work. I also attempted to
download updates from the Windows Update site but have
been unable to because this error shuts down and restarts
my system. Any ideas would be appreciated. Thanks!!!
Click to expand...

You may be infected with the W32/Sasser.worm.

This is the fix:
Security Update for Windows 2000 (KB835732)
http://www.microsoft.com/downloads/details.aspx?FamilyId=0692C27E-F63A-
414C-B3EB-D2342FBB6C00&displaylang=en

Phil M.
 
Hi Rick,

You are infected with W32/Sasser.worm or a similar worm.

To stop the restarting, try going to "RUN" in the Start menu and typing
"shutdown -a" without the quotes.

The first step to take is to update your machine with the latest patches.
You can do this at the following site:

http://windowsupdate.microsoft.com/

Then, you need to remove the worm. This can be accomplished using McAfee's
Stinger program. Stinger can be downloaded here:

\http://vil.nai.com/vil/stinger/

Hope this helps. Feel free to post back if you need any more assistance.

Sincerely,
Benjamin Johnstone-Anderson
Microsoft MVP - Windows Security
Remove "SPAM" from email address to reply!
Security Manifest: www.msmvps.com/trafton/
 
Benjamin,

Thank you for your quick response. Unfortunately, I
haven't been able to solve the problem. I followed your
instructions...went to the RUN box and typed in shutdown -
a but this couldn't be found by the operating system. I
tried going to windows update again but keep getting the
error message and then my pc is restarted. I was able to
download the stinger tool because I'm running a dual-boot
system. I ran it but it did not find the virus. Is there
any way to download and install the latest windows updates
from one drive (c drive) and install them on the e: drive
where I'm having the trouble? Thanks again for your
help. Any other suggestions would be appreciated.
 
The FIRST thing you need is anti-virus, and
make sure it is configured to download the latest updates at least once a
week. www.grisoft.com is free anti-virus, use it. [Note that once you are
infected, your anti-virus may not be able to remove some viruses, in which
case you have to download and run the www.mcafee.com "Stinger" tool or
search the virus encyclopedia on the web site of your anti-virus
manufacturer for the exact name of the virus found on your computer, in
order to download a special one-time virus removal tool.]

If you aren't running XP, you need to get your own firewall. www.kerio.com,
www.sygate.com and www.zonealarm.com are all free firewalls. Get one.

The LSASS vulnerability is fixed by the MS04-011 patch. You need all the
Microsoft patches, but pay special attention to that one. First, download
and install that patch by going to www.microsoft.com/technet/security and
reboot. Then, be sure to visit http://windowsupdate.microsoft.com about
once a month [preferably Wednesday after the second Tuesday of every month]
to get all the patches you need. The first time you visit there, you may
have to visit the site and reboot two or three times in a row to get all the
patches.
 
Back
Top