What's Happening With This?

[coldnorth]

I have a little problem that I don’t understand at all. My brother has a laptop, a dell with win 2000 and a DSL. Everytime he goes online, or as its DSL whenever the line is plugged in the computer shuts down and re-boots. He gets an error saying that lsass.exe is shutting down or re-starting the system and a countdown. Anyone have an idea what this could be. A virus, scumware or perhaps a problem with his net provider?

[tesco]

It's the blaster worm...i think.

Run a virus scan.

Next time his computer wants to shutdown, quickly go start>run>type 'shutdown -a'.
This stops it from shutting down.

Now go to www.windowsupdate.com and download all the patches, then reboot system and do another virus scan.

NOD32 is a rgeat antivirus.

and in teh future, the computer should be running a firewall to prevent stuff like this.

[Aaron_T]

if it turns out not to be the MS blaster it may possibly be a trojan, if so go to www.download.com (http://www.download.com)


and search for Trojan Guarder :)

[coldnorth]

Whats the best way/program to fix the blaster? Thanks everyone.

[SP1]

to fix it jus get the security patch from MS (Blaster Fix Link) (http://www.microsoft.com/security/incident/blast.mspx)

[manker]

I don't think it's the blaster worm. sounds more like the sasser worm to me (targetting the lsass.exe windows vulnerability)

here is the fix (http://www.microsoft.com/downloads/details.aspx?FamilyID=76c6de7e-1b6b-4fc3-90d4-9fa42d14cc17&displaylang=en)

umm just in case run the app in the ^ link, as well as downloading the patches rossco recommended ;)