Re: Lsass Error
anonymous_at_discussions.microsoft.com
Date: 07/24/04
- Next message: George Hester: "Re: WFP Errors"
- Previous message: sancho: "fax on xp pro in the domain"
- In reply to: Steven L Umbach: "Re: Lsass Error"
- Next in thread: Frank: "Lsass Error"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 24 Jul 2004 05:17:11 -0700
Thanks Steve. Will work out as per your suggestions.
Vinay
>-----Original Message-----
>Make sure these computers are 100 percent up to date on
critical updates,
>assuming they have been tested to not cause a problem
with your
>configuration, though you are on a short time frame
solution. However
>installing a needed critical update will not help and
existing problem but
>can help prevent reoccurance.
>
>Those computers need to be isolated from any other
properly functioning
>computers ASAP until it can be determined what the
problem is, what course
>of action needs to be taken that may involve a total
rebuild, and repairs
>and preventive measures have been implemented.
>
>Contact your antivirus vendor ASAP as how to proceed and
for any other
>helpful info. In the mean time third party tools may help
determine what
>processes/executables/registry entries are causing this
to happen. Booting
>into safe mode with networking may help in giving more
time to see what is
>going on. SysInternals has some free tools. In particular
Process Explorer,
>Autoruns, and TCPView should help. Also search
>http://www.symantec.com/avcenter/ and
http://www.google.com web AND groups
>to see if you can track down any more info relating to
what you find. ---
>Steve
>
>http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
>
>"Vinay Goel" <anonymous@discussions.microsoft.com> wrote
in message
>news:2fe601c470cd$10bd8940$a501280a@phx.gbl...
>> Hi,
>>
>> Need your immediate help. All of a sudden approx 25
>> machines have developed a malicious problem at EXL
Noida.
>> Every now and then they give the error
message "Lsass.exe
>> terminated unexpectedly with error code 128" and
reboots.
>> We have checked these machines for virus through Mcafee
>> Virus Enterprise that is installed as well as third
party
>> tools that from Microsoft/CA/Symantec/Mcafee for Sasser,
>> but none of these have reported any infections. Also
>> checked for the patch Windows2000-KB835732-x86-ENU.EXE
>> (MS04-011), but the problem is happening even on the
>> machines which have these patches installed long back.
>> Have also checked the machines thoroughly for the
symptoms
>> mentioned by many websites to look for Sasser
infections,
>> but found nothing. Event viewer of the affected systems
is
>> also not indicating any anomaly.
>>
>>
>>
>> Request your expertise in cracking and preventing this
>> problem from spreading. Please let us know in case you
>> need more information
>>
>>
>>
>> Thanks,
>>
>> Vinay Goel
>>
>
>
>.
>
- Next message: George Hester: "Re: WFP Errors"
- Previous message: sancho: "fax on xp pro in the domain"
- In reply to: Steven L Umbach: "Re: Lsass Error"
- Next in thread: Frank: "Lsass Error"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
