lsass.exe yesterday started acting up!

  • Thread starter Thread starter minsik
  • Start date Start date
M

minsik

HI,

Yesterday our Xp computers started acting up! Shutting down every so after
due to a lsass.exe error. We reckon it was Sasser but Nortons 8.1
corporate version did, (updated every 4 hrs automatically + we did a manual
update immediately) and it did not find a thing + it allowed sasser (we
think) to enter the system. Note the Symantec cleaners and also vet
sasser cleaner programs reported nothing either.

After updating the relevant security xp windows patches it all seems ok but
there was still no sign of any virus activity or reporting!


Anyone else had this sort of problem yesterday/ it seems weird that Nortons
found nothing or any of the sasser cleaner programs found nothing yet there
was a problem somewhere! Weird and worrying.

What's the consensus! a virus or a microsoft bug?

Thanks all MInsik.


minsik@"NOSPAM"4u.net
 
HI,

Yesterday our Xp computers started acting up! Shutting down every so after
due to a lsass.exe error. We reckon it was Sasser but Nortons 8.1
corporate version did, (updated every 4 hrs automatically + we did a manual
update immediately) and it did not find a thing + it allowed sasser (we
think) to enter the system. Note the Symantec cleaners and also vet
sasser cleaner programs reported nothing either.

After updating the relevant security xp windows patches it all seems ok but
there was still no sign of any virus activity or reporting!


Anyone else had this sort of problem yesterday/ it seems weird that Nortons
found nothing or any of the sasser cleaner programs found nothing yet there
was a problem somewhere! Weird and worrying.

What's the consensus! a virus or a microsoft bug?
THe consensus is whoever is managing your LAN wants to be fired.

1) Your systems weren't patched.
2) A Firewall would've blocked it.

Neither of these RUDIMENTARY BASIC security procedures were followed.
The person acting as your network administrator is completely incapable
of doing the job to any acceptable standard.
 
minsik said:
HI,

Yesterday our Xp computers started acting up! Shutting down every so after
due to a lsass.exe error. We reckon it was Sasser but Nortons 8.1
corporate version did, (updated every 4 hrs automatically + we did a manual
update immediately) and it did not find a thing + it allowed sasser (we
think) to enter the system. Note the Symantec cleaners and also vet
sasser cleaner programs reported nothing either.

After updating the relevant security xp windows patches it all seems ok but
there was still no sign of any virus activity or reporting!


Anyone else had this sort of problem yesterday/ it seems weird that Nortons
found nothing or any of the sasser cleaner programs found nothing yet there
was a problem somewhere! Weird and worrying.

What's the consensus! a virus or a microsoft bug?

Thanks all MInsik.


minsik@"NOSPAM"4u.net

Most of those things will put an entry in your startup programs (run
msconfig to check).
Also if you install a firewall like zonealarm, it will tell you when the
worm tries to access the internet, what the program name is, and stop it
spreading.
Get it, its free.
 
Thanks for all the help and answering the question.

And i also agree,

1) As a regional office we as so tightly under the finger of our head
office that we cant fart ourselves unless head office says so. They control
what updates we apply and when and as they are so busy doing their own
systems we come a poor last down the food chain!

2) The firewall in place is managed by head office in a big place near
sydney and we are under strict instructions not to touch or modify
anything! That's as cause they tried the AV section and stopped their
whole area's email! So they are so useless about setting up ours let alone
theirs!

The question was, "What's the consensus! a virus or a microsoft bug?"
and i spose yo add that Nortons really is useless if it couldn't stop it
getting in to our network, updated every few hours and running on every pc
int he building and scanning every email!

Thanks again for the replies.


Minsik.






minsik@"NOSPAM"4u.net
 
Back
Top