Printable View
HEY BUDDY
CAN ANYBODY HELP MEEEEEE
IN WIN xp AND WIN-2000(ADVANCED SERVER) A WINDOW IS AUTOMATICALLY COMING WITHOUT ANY CLOSE BUTTON WITH TIME STARTS FROM 59 TO 00 AND SHUT DOWING THE SYSTEM AUTOMATICALLY WITH THE ERROR
"C:\WINNT\SYSTEM32\LSASS.EXE" CALL THE ERROR
Immediately you see it go
Start - run - type cmd <ENTER>
Then at the cmd prompt type
shutdown -a <ENTER>
Then update your virus definitions and scan for viruses.......
If you don't have a virus scanner go to www.trendmicro.com and use their "Housecall"
TigerShark is right, although i must suggest you not to use CAPITAL characters anymore in your future posts, it isn't that nice to read ;)
the "shutdown" command is used to control the shutdown. you can shutdown your system with it, let it reboot, or abort a shutdown using the "shutdown -a" command like TigerShark said..
the Sasserworm and the Blasterworm are virusses which uses the same "joke", the only way to abort it to download a removal tool is by using the "shutdown -a" command...
You are infected by a worm. Probably Sasser or MSBlaster.Quote:
Originally posted here by sam2k
IN WIN xp AND WIN-2000(ADVANCED SERVER) A WINDOW IS AUTOMATICALLY COMING WITHOUT ANY CLOSE BUTTON WITH TIME STARTS FROM 59 TO 00 AND SHUT DOWING THE SYSTEM AUTOMATICALLY WITH THE ERROR
"C:\WINNT\SYSTEM32\LSASS.EXE" CALL THE ERROR
Install, update and run a virusscanner.
Install, update and run a personal firewall.
Do windows update to prevent it from being infected again.
LSASS.EXE is associated with the Sasser worm..
And to repeat the good advice so far
Quote:
Install, update and run a virusscanner.
Install, update and run a personal firewall.
Do windows update to prevent it from being infected again.
cheers
BTW: Didn't you learn your lesson from Febuary of this year?
http://www.antionline.com/showthread...hreadid=258283
Your stuck in a ID-ten-T system admin training loop
Your system has been compromised by malware. Reformat it and reinstall current patches from a safe protected environment. On no account connect it (directly) to the internet before it's fully patched.
I recommend use of a nat router until it's fully patched (and in fact, after that too)
Slarty