Re: LSA Shell Export

From: Carey Frisch [MVP] (mrxp2004_at_nospamyahoo.com)
Date: 05/04/04


Date: Tue, 4 May 2004 08:05:51 -0500

Apparently, your PC has suffered a major security breech and is now
infected with Malware ("The Sasser Worm") because:

1. The latest Windows XP Critical Updates have apparently not been installed......
2. The PC's firewall apparently has not been properly enabled.....
3. Out-of-date or no AntiVirus program has been installed......

If your computer is constantly attempting to shutdown
or reboot, quickly go to:

Start > Run and type: CMD , and hit enter.
This opens the Command Prompt window.

Then type: shutdown -a , and hit enter.

This should halt the rebooting problem.

Follow these directions to remove The Sasser Worm from your computer:
http://www3.telus.net/dandemar/sasser.htm

[Courtesy of MS-MVP Jupiter Jones]

What You Should Know About the Sasser Worm and Its Variants
http://www.microsoft.com/security/incident/sasser.asp

PSS Security Response Team Alert - Sasser Worm and Variants
http://www.microsoft.com/technet/Security/alerts/sasser.mspx

W32.Sasser.B.Worm Critical Information
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html

W32.Sasser Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

3 Steps to Help Ensure your PC is Protected
http://www.microsoft.com/security/protect/

Frequently Asked Questions About Antivirus Software
http://www.microsoft.com/security/protect/antivirus.asp

Special note if you use AOL:

America Online installs its own connection settings that override
the ones that come with Windows XP. America Online's
connection settings don't include a way to turn on Windows XP's
built-in firewall.

Visit the following web site for instructions on downloading
a FREE firewall program for your computer.

Ref: http://www.updatexp.com/free.html

Consider purchasing a top-notch Internet Security program
that will help protect your PC from future viruses, hackers, and
privacy threats:
http://www.symantec.com/sabu/nis/nis_pe/

-- 
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Be Smart!  Protect your PC!
http://www.microsoft.com/security/protect/
----------------------------------------------------------------------
"DK" <daking@xavier.vic.edu.au> wrote in message:
 news:7ee201c431d7$a4c1caf0$a401280a@phx.gbl...
| Hey.
| 
| I am getting a message that says something about an LSA 
| Shell Export error.  I click "do not send report" 
| or "send report" and after about a minute, a box appears 
| that has an extremely similar interface to that of the 
| MSBlaster virus, that says that the computer will restart 
| in 60 seconds.  I've updated all the MSBlaster patches, 
| and it still occurs.  Anyone else able to help me??
| 
| Thanks heaps..
| 
| DK


Relevant Pages

  • Re: Unsolicited Computer Reboot
    ... The latest Windows XP Critical Updates have apparently not been installed...... ... Follow these directions to remove The Sasser Worm from your computer: ... PSS Security Response Team Alert - Sasser Worm and Variants ... the ones that come with Windows XP. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Shut down
    ... The latest Windows XP Critical Updates have apparently not been installed...... ... Follow these directions to remove The Sasser Worm from your computer: ... PSS Security Response Team Alert - Sasser Worm and Variants ... the ones that come with Windows XP. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Lsass.exe
    ... The latest Windows XP Critical Updates have apparently not been installed...... ... Follow these directions to remove The Sasser Worm from your computer: ... PSS Security Response Team Alert - Sasser Worm and Variants ... the ones that come with Windows XP. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: lsass
    ... The latest Windows XP Critical Updates have apparently not been installed...... ... Follow these directions to remove The Sasser Worm from your computer: ... PSS Security Response Team Alert - Sasser Worm and Variants ... the ones that come with Windows XP. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: (RPC) Remote Procedure Call Unexpected Termination
    ... >>As you all know Microsoft's Windows XP Professional has ... >Download stinger, the stinger tool helps in detecting ... >What You Should Know About the Sasser Worm and Its ... >Microsoft Security Bulletin MS04-011 ...
    (microsoft.public.windowsxp.help_and_support)