Help Me Please

[yammi]

When I was online a "System Shutdown" dialog box appears. It counts down to zero sec and my PC is shutting down.
Error detail is
========Message
The system process 'C:\Windows\System32\lsass.exe' terminated unexpectedly with status code -1073741819. The system shutting down and restart.
How can I fix this problem?
It make me very crazy.
If anyone experience about this problem, help me how to fix this.
Thanks
AMK

[Krell]

You need to make cetain you have at least SP1 for XP

You should conside another firewall also, such as Sygate Pro.

Go to the update windows site, and get the security patches, NOW

Make CERTAIN that the "Messenger" service is DISABLED

Do a full virus scan

http://housecall-beta.trendmicro.com/en/start_corp.asp


Do these things first, then we have something to talk about.




.

[silentscream]

sasser/blaster wow its still about

u can use ure xp admin tools to disable the remote procedure call restart
or get the fix and patch from the simantech website

up to u

oh and get a firewall

**
and if krell is guiding u, u will be in good hands

.

[The Hunter]

I havnt had to do help for this in a hella long time.

[The Hunter]

sasser/blaster wow its still about

u can use ure xp admin tools to disable the remote procedure call restart
or get the fix and patch from the simantech website

up to u

oh and get a firewall

**
and if krell is guiding u, u will be in good hands

.

The best.....

[zarquon]

When I was online a "System Shutdown" dialog box appears. It counts down to zero sec and my PC is shutting down.
Error detail is
========Message
The system process 'C:\Windows\System32\lsass.exe' terminated unexpectedly with status code -1073741819. The system shutting down and restart.
How can I fix this problem?
It make me very crazy.
If anyone experience about this problem, help me how to fix this.
Thanks
AMK
You have the sasser worm, here is a link to the symantec sasser removal tool and a usage guide. Let me know if you any issues.

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

[zpman]

When I was online a "System Shutdown" dialog box appears. It counts down to zero sec and my PC is shutting down.
Error detail is
========Message
The system process 'C:\Windows\System32\lsass.exe' terminated unexpectedly with status code -1073741819. The system shutting down and restart.
How can I fix this problem?
It make me very crazy.
If anyone experience about this problem, help me how to fix this.
Thanks
AMK

dont spam Linux. He is looking for actual help.

[Malakai1911]

Krell was spot on.

Upgrade to Service Pack 2 (http://www.microsoft.com/downloads/details.aspx?FamilyId=049C9DBE-3B8E-4F30-8245-9E368D3CDB5A&displaylang=en), get a firewall (I suggest Agnitum Outpost Pro (http://www.agnitum.com/)) , use an anti-virus (I suggest Nod32 (http://www.nod32.com/)). It's that easy, and you wont have to worry about something like this happening again.

[zarquon]

dont spam Linux. He is looking for actual help.

Nobody has mentioned linux on this thread, wtf are you talking about?

[silentscream]

Nobody has mentioned linux on this thread, wtf are you talking about?
was thinking the exact same thing

hmmm

maybe he can see what we cannot ??

.

[zarquon]

was thinking the exact same thing

hmmm

maybe he can see what we cannot ??

.

Just noticed Hunter edited his post, probably telling us how crap microsoft is..
He's talking out of his ass again. Wouldn't be the first time and anyway he is the biggest friggen linux spammer around. Just check his post for his I am king of GNU/LINUX bow down to me, crap.

[silentscream]

Just noticed Hunter edited his post, probably telling us how crap microsoft is..
He's talking out of his ass again. Wouldn't be the first time and anyway he is the biggest friggen linux spammer around. Just check his post for his I am king of GNU/LINUX bow down to me, crap.
im pretty nifty on my old acorn BBC

mine had 2, 5 1/2 floppy drives :O

lol

.

[zarquon]

im pretty nifty on my old acorn BBC

mine had 2, 5 1/2 floppy drives :O

lol

.

Nothing on my old zx spectrum.

[The Hunter]

Him spamming Linux is one of the reasons people will never gravitate to it.

[silentscream]

Him spamming Linux is one of the reasons people will never gravitate to it.
ure reasuring presence is always welcome :)

.

[zarquon]

Him spamming Linux is one of the reasons people will never gravitate to it.

Actually am a bit of a linux fanboy, but i dont shove it down everyones throat. Its up to the individual to try it out for themselves and see whether it meets there needs. Although with the onslaught of drm riddled MIcrosoft Vista, i tend to think there will be serious migration to it as it is becoming more mainstream. O.k. Enough of the linux stuff, back to sasser.................

[silentscream]

zpman is at it again in this thread last page
http://www.zeropaid.com/bbs/showthread.php?t=1102&page=5

.

[zarquon]

zpman is at it again in this thread last page
http://www.zeropaid.com/bbs/showthread.php?t=1102&page=5

.

Hey hunter, is zpman ban temporary or permanent??

[silentscream]

Hey hunter, is zpman ban temporary or permanent??
quit writing what im thinkin lol

but yeah id like to know too

i think he needs to calm down a little

[The Hunter]

3 day temp.

[silentscream]

3 day temp.
was it just coz he was being a git ??

Greg

[The Hunter]

Posting shit in a help thread. Spamming.

[silentscream]

Posting shit in a help thread. Spamming.
good call

now im off to bed, its 03:25 am here and i have work

night all

Greg

[zarquon]

quit writing what im thinkin lol

but yeah id like to know too

i think he needs to calm down a little

Yep my mind reading skills come in handy some time. Now whats up with the pervy cj thoughts? lol.

[yammi]

You need to make cetain you have at least SP1 for XP

You should conside another firewall also, such as Sygate Pro.

Go to the update windows site, and get the security patches, NOW

Make CERTAIN that the "Messenger" service is DISABLED

Do a full virus scan

http://housecall-beta.trendmicro.com/en/start_corp.asp


Do these things first, then we have something to talk about.

Hi Krell,
Thanks for your advice. Now I'm trying to get the security patches.
And I'll try full virus scan with Norton Antivirus.
Hope I'll be fine.
Many thanks
AMK




.
Looking for somethin to ease the pain.

[yammi]

You have the sasser worm, here is a link to the symantec sasser removal tool and a usage guide. Let me know if you any issues.

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html
I tried what you've said. Got a fixtool and do every steps as they guide.
But fixtools have not found any sasser worm. And the problem cannot fixed.
30 minutes ago this stupid dialog box appear again and restarted while trying get window updates.
Whoo! Feeling uncomfortable.
Thanks Zarquon.
AMK

[Mels_Smileys45]

Everytime I stick my neck out for someone they go do a dick thing and get themselves banned. Oh well, those who told me about ZPman were right I guess. I think I was missing the dickhead postings.

[black_magiic]

It happesn to the best of us mel.

[zarquon]

I tried what you've said. Got a fixtool and do every steps as they guide.
But fixtools have not found any sasser worm. And the problem cannot fixed.
30 minutes ago this stupid dialog box appear again and restarted while trying get window updates.
Whoo! Feeling uncomfortable.
Thanks Zarquon.
AMK

Download and install the fix from microsoft.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=3549ea9e-da3f-43b9-a4f1-af243b6168f3

Also make sure you end the process first, before applying patch.

a. Press Ctrl+Alt+Delete once.
b. Click Task Manager.
c. Click the Processes tab.
d. Double-click the Image Name column header to alphabetically sort the processes.
e. Scroll through the list and look for the following processes:
• avserve.exe
• any process with a name consisting of 4 or 5 digits followed by _up.exe (eg 74354_up.exe).
f. If you find any such process, click it, and then click End Process.
g. Exit the Task Manager.

Then disable system restore before patch.

[yammi]

Hi Zarquon,
I tried as you said. But found nothing what you said.
avserve.exe or any four digits -up.exe process.
What am I gonna do? More advice please.
AMK

[Auggie2k]

I googled your error and exactly what you said came up at Microsoft (did you install bearshare recently?) Anyway, here's the link...

http://support.microsoft.com/?scid=kb;EN-US;Q321024