C:\WINNT\System32\lsass.exe Code 128

Posted on 2004-08-19
Medium Priority
Last Modified: 2010-08-05
I'm running W2K Pro on a Dell Optiplex.  I recently installed a new primary hard drive and a clean copy of W2K Pro.  The only other installation was the Intel chipset from the Dell Resource CD.  I keep getting a dialogue box with the following message: "The system process C:\WINNT\System32\lsass.exe terminated unexpectedly with status code 128."  The system shuts down and restarts.  Can anyone tell me what I need to fix, and how I need to fix it?  (I'm a data person, not an IT pro. So, you need to walk me through it.)  Thanks.
Question by:DocPit
  • 3
LVL 65

Accepted Solution

SheharyaarSaahil earned 2000 total points
ID: 11848564
Hello DocPit =)

What You Should Know About the Sasser Worm and Its Variants:

Apply MS Security Bulletin:

Use One of the Following Removal Tools to Delete the Virus:
1) Sasser (A-F) Worm Removal Tool (KB841720) >> http://www.microsoft.com/downloads/details.aspx?familyid=76C6DE7E-1B6B-4FC3-90D4-9FA42D14CC17&displaylang=en

2) FxSasser.exe.from Symantec >> http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

3) Stinger from McAfee >> http://vil.nai.com/vil/stinger/

4) SysClean PACKAGE from TrendMicro >> http://www.trendmicro.com/download/dcs.asp

5) SASSGUI\SASSSFX from Sophos >> http://www.sophos.com/support/disinfection/sasser.html

6) ClnSasser from Computer Associates >> http://www3.ca.com/Files/VirusInformationAndPrevention/clnsasser.zip

7) F-Sasser from F-Secure >> http://www.f-secure.com/tools/f-sasser.zip

8) SasserFix2 from Norman >> http://www.norman.com/Virus/Virus_removal_tools/14938

9) QuickRemover from Panda >> http://www.pandasoftware.com/virus_info/encyclopedia/overview.aspx?lst=sol&idvirus=46865
NOTE: plzz see the Relevant Sites for FULL Instructions on Removal in the First Link Before using the Tools


Expert Comment

ID: 11849894

good answer SheharyaarSaahil
there is nothing to add more ;-)
LVL 65

Expert Comment

ID: 11850832
lol.... thanx saito :D

Author Comment

ID: 11888269
Thanks Sheharyaar,

Just a note: The MS site returned a message: "No infection found."  The Symantec site abended the process.  However, the McAfee site found and deleted the virus (W32/Sdbot.worm.gen).
LVL 65

Expert Comment

ID: 11888303
that's why i love Mcafee ;-)
Glad u got rid of that nasty virus !!!!

Cheers ^_^

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The narrative of smartphone revolution is incomplete without the mention of apps, for the latter is being used today for a variety of purposes. From booking hotel (or plane) tickets to ordering food to even conducting small businesses, mobiles apps …
This video tutorial shows you the steps to go through to set up what I believe to be the best email app on the android platform to read Exchange mail.  Get the app on your phone: The first step is to make sure you have the Samsung Email app on your …
Hi, this video explains a free download that you can incorporate into your Access databases, or use stand-alone for contact management. Contacts -- Names, Addresses, Phone Numbers, eMail Addresses, Websites, Lists, Projects, Notes, Attachments…

622 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question