• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 422
  • Last Modified:

Windows XP Shuts Down every 10 minutes - lsass.exe error - fdisked and restaged twice

We have a machine that was shutting down every ten minutes or less due to an lsass.exe error.  Stinger performed, windows updated, and mcafee updated - problem still persisted.  Completely fdisked the machine and restaged the machine.  The problem still persists.  Tried it another time and still no fix.  Does anyone have any suggestions on what the cause of this problem is and what can we do to fix it.  We're stumped.

T
0
AxesWannabee
Asked:
AxesWannabee
  • 2
  • 2
  • 2
  • +1
1 Solution
 
SheharyaarSaahilCommented:
Hello AxesWannabee =)

Is the machine on network ??
try disconnecting the modem\dialup\networking card if its having one connected and then try ??
0
 
AxesWannabeeAuthor Commented:
We've actually done that. Yes, it's connected to the network, but removing didn't change anything.
0
 
SheharyaarSaahilCommented:
>> Yes, it's connected to the network,

so before fdisking and reinstalling,,,, did u disconnect all network\dialup\modem from it or....??
ad after installing, does the error starts coming at once or after connecting to internet ??
0
Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

 
EvarestCommented:
If you're having trouble with lsass it's most probably due to the so called sasser worm. The latest variant i know of is quite a "pain in te ass", pardon my expression, but it just is.

The problem with stinger is that it doesn't always find all the virus instances. This particular virus will create several copies of itself, which will be run when windows starts.

You might want to update your windows, so the lsass error doesn't occur anymore:
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

and further reading material:
http://vil.nai.com/vil/content/v_125007.htm

or you can manually remove the service that's executing the worm:
http://support.microsoft.com/?kbid=321024#kb3

Always nice to have such a thing on your computer, isn't it (i had it a couple of days ago after a format...)

Good luck!
Evarest

0
 
EvarestCommented:
Oh yeah, the sasser worm will scan for "random" IP addresses and then upload itself to that computer. This is the reason why you'll be infected the moment you go online or on your network.

To prevent infection (or better: make it more difficult), update windows before going on your network.

Evarest
0
 
AxesWannabeeAuthor Commented:
Thanks everyone for your help- we'll try that and let you know how it goes.
0
 
Sam CohenConsultant to Digital/DeveloperCommented:
is it counting down from 45?
if so , i t could be a virus
0
 
Sam CohenConsultant to Digital/DeveloperCommented:
systematic  norton AV website
has a fix for it
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Microsoft Windows 7 Basic

This introductory course to Windows 7 environment will teach you about working with the Windows operating system. You will learn about basic functions including start menu; the desktop; managing files, folders, and libraries.

  • 2
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now