Solved

Auto shutdown XP Sp2 with lsass.exe

Posted on 2004-08-22
12
2,085 Views
Last Modified: 2012-05-05
My computer have installed Xp Sp2(beta).  When I connect to Internet after few minutes.  There's a auto shutdown error due to lsass.exe cause, then my PC auto restart.
I have scaned it with Norton Antivirus.  But I didn't find anything.
Please help me a way to resolve the problem.  Thank
0
Comment
Question by:lhbaonet
  • 3
  • 2
  • 2
  • +3
12 Comments
 
LVL 8

Accepted Solution

by:
MarkDozier earned 100 total points
ID: 11866999
REMOVE SP2(beta) and wiat a few months for M/S to finishing fixing a few of the bugs in SP2 then d/l from M/S website
0
 
LVL 2

Expert Comment

by:D0uble_A
ID: 11867588
0
 
LVL 2

Expert Comment

by:D0uble_A
ID: 11867592
If you dont have enough time to download and scan, then go to start -> run -> and type Shutdown -a
0
Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

 

Expert Comment

by:bfens2
ID: 11867853
sounds like the sasser worm,
disable all your startup programs that aren't essentual.
not sure for xp but i think you can type: msconfig into the run dialog box
(start--> run)
goto startup
remove ticks
restart computer
see if you can access the internet now
download removal tool from symantec website
hope that helps
0
 
LVL 6

Expert Comment

by:acmp
ID: 11868288
MarkDozier:
I run SP2Beta and it's fine on my system.

Unless you are getting specific SP 2 issue then I can't see any reason to remve it.

I agree with bfens2, this sounds like a Sasser worm. The best thing is to use AV software to prevent the infection in the first place, second best is to remove it. Stinger will do that.

Bfens2 msconfig idea is good for XP and effectivly gives you a 'safemode' boot that should prevent the worm from loading. once rebooted use stinger or whatever to remove the worm.

acmp<><
0
 
LVL 8

Expert Comment

by:MarkDozier
ID: 11868474
Rule #11  
Never run beta anything on any production machine. Other machines are up to the Admins (re.  MY) discretion.

If he does have the sasser and after reading the postings I would agree it is probable that he does the sasser removal tool from Symantec works well.
http://securityresponse.symantec.com/avcenter/tools.list.html


0
 

Expert Comment

by:bfens2
ID: 11869796
you said you scanned the computer.
are your virus defintions up to date?
0
 

Expert Comment

by:dtregoning
ID: 11875909
In the past i have seen this symptom when a machine nearby on the internet has the Sasser worm and it is causing the machine in question to restart (by attempting infection). Your virus scanner would stop you from getting infected, but you would still be affected by the other machine. Perhaps ensure that the ICF or some other firewall is enabled on the Internet connection and then try connecting to the internet.
0
 

Author Comment

by:lhbaonet
ID: 11876733
My Norton Antivirus is always updated with the new definiton on www.symantec.com.  I also use this "http://vil.nai.com/vil/stinger/" tool and sasser tool on www.symantec.com.  But I couldn't find anything virus sasser.

I have just found that my pc only auto shutdown when It connect to Internet by dial up modem.  Because when I try it on internet via a gateway in my LAN, It is OK.  I may think there's some soft or service related to dial up have started when I open modem.  So It cause a error in Windows.  When the error" Auto shutdown" start", I have tried with "shudown -a" command.  It can help me to turn off it and not restart my pc.  But when I finished my work and want to shut down my pc, then I couldn't do that.

If I want to remove the Sp2(beta) inside windows.  Can you tell me the way???  Because I think it cause by Sp2
Thanks


0
 

Expert Comment

by:dtregoning
ID: 11876801
According to the microsoft info for the beta's and RC releases you should be able to uninstall this from Add/Remove programs in the control panel. (info at bottom of http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/readmesp.mspx)
0
 
LVL 6

Expert Comment

by:acmp
ID: 11882061
I think that dtregoning has a point with the firewall thing.

If you are only affected with you dial up maybe you could check your firewall is active for this connection.  If you use the ICW in WinXP then you will need to turn it on for all connections individually.

FYI I just installed SP2 (not beta) on my XP Pro box and it looks fine.

amcp<><
0
 
LVL 6

Expert Comment

by:acmp
ID: 11882064
Oh, and did removing SP2Beta fix it?
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
stamp tool on acrobat 1 41
Map software access 4 44
what is the best Integrated development environment 2 35
mozilla how to book mark to specific book mark folder 10 90
A high-level exploration of how our ever-increasing access to information has changed the way we do our jobs.
The article will include the best Data Recovery Tools along with their Features, Capabilities, and their Download Links. Hope you’ll enjoy it and will choose the one as required by you.
The viewer will learn common shortcuts with easy ways to remember them. The viewer will then learn where to find all of the keyboard shortcuts, how to create/change them, and how to speed up their workflow.
XMind Plus helps organize all details/aspects of any project from large to small in an orderly and concise manner. If you are working on a complex project, use this micro tutorial to show you how to make a basic flow chart. The software is free when…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question