lsass.exe

From: Bob (bob_at_noemail.co)
Date: 05/28/05 

Date: Sat, 28 May 2005 13:50:05 +0100

Hi,

Several systems simultaneously shutdown on our network the other day with a
message from NT AUTHORITY SERVICE stating that c:\winnt\system32\lsasse.exe
had failed and the system would reboot in about 60 seconds.

Is this related to the sasser worm as our av people have stated that we are
patched for the above scenario unless it's a new varient.

Some systems remained up which leaves me to believe that the issue is
related to service packs/security patches rather than our av solution being
able to identify a problem with lasass.exe.

Any feedback here would be greatly appreciated.

Bob