Re: A weird 'lsass' problem
Here to say what happened.
Actually, the procedures you've suggested seem perfectly correct,
although I didn't have to go this way, I just re-installed ecerything
but this time with Service Pack 2 which I downloaded from Microsoft.
Actually, when the SP2's Firewall is ON, there are no 'lsass' attacks.
If I block the Windows Firewall and leave only my other Firewall
(Kaspesrky), the 'lsass' attacks start again. Kaspersky says it's
'Lovesan' virus and successfully repulse it, but not sure for how long.
So I keep the two Firewalls ON.
On the other hand, it says that it's no good to have two or more
Firewalls ON together... Is that right ? Go figure...
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> From: "Bad Disciple" <firstname.lastname@example.org>
> | Hi folks,
> | Computer problems never stop... and damn weird problems.
> | On a P3 computer, with Windows XP Pro, SP1, Antivirus
> | and Firewall (Kaspersky) installed, I install the modem (DSL)
> | and when I connect on Internet... it blocks in the first 1-2 min.
> | A nasty box appears saying:
> | "This system is shutting down. Save all your work...
> | This shutdown was initiated by NT AUTHORITY\ SYSTEM.
> | ... The system process Windows \System32\lsass.exe
> | terminated unexpectedly with status code: 1073741819"
> | After the computer restarted it says:
> | "LSA SHELL (Export Version) encountered a problem and needs to close."
> | I re-formatted the HD and re-installed Windows (with SP1).
> | I typed 'shutdown -a' in 'run' as suggested. This worked just
> | for a while. My Firewall was reporting repeatedly that
> | there was an attack by 'lsass exploit' until finally it made again
> | the blocking. Now even retyping 'shutdown -a' doesn't help,
> | it blocks again every time when I connect to Internet. I made
> | an antivirus scan (freshly updated), it reports NOTHING!
> | I scanned it whit an antispy, it says there is NO spyware!!
> | Another mind-blowing thing is that on my other computer
> | (P4, with the same Windows XP Pro, but SP2, and the same
> | Antivirus-Firewall, Kaspersky) I don't have this problem at all !!
> | Incredibly ****ing off... Seems like a damn well made
> | worm or whatsoever ! (What will come after it ??)
> | Could anybody help with what the hell is going on ?
> | BD
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
> start --> settings --> control panel --> internet options --> delete files
> Dump the contents of the Mozilla FireFox Cache
> Tools --> Options --> Privacy --> Cache --> Clear
> Obtain McAfee's virus and worm removal tool, Stinger:
> 1) If you are using WinME or WinXP, disable System Restore
> 2) Reboot your PC into Safe Mode and shutdown as many applications as
> 3) Using McAfee Stinger, perform a Full Scan of your platform and
> clean/delete any
> infectors found
> 4) Restart your PC and perform a "final" Full Scan of your platform
> 5) If you are using WinME or WinXP, Re-enable System Restore and
> re-apply any
> System Restore preferences, (e.g. HD space to use suggested 400 ~
> 6) Reboot your PC.
> 7) If you are using WinME or WinXP, create a new Restore point
> * * * Please report back your results * * *
|All times are GMT. The time now is 10:54 AM.|
Powered by vBulletin®. Copyright ©2000 - 2013, vBulletin Solutions, Inc.
SEO by vBSEO ©2010, Crawlability, Inc.