I'm helping someone who is using WinXP Media edition OS. They have begun getting an lsass.exe error shortly after booting. First, there are 2 of those generic error messages about the program not being able to access instructions at a particular memory location. The first of these messages will show....I click the Cancel button on the pop-up message box. A few moments later, the second one will show....I click cancel. After about a minute....a pop-up error message box about LSA (export shell) will show. I close this window. Then...a minute or so later...a larger Pop-up error message box informing of an error in Lsass.exe and that Windows will shut down in 50 seconds....and it does. I've started search and.....Sasser...right? All info seems to be from 2004. I've followed it all: -Turn off System restore -Get all security updates (SP2 and all others) - Typed the "run shutdown -a" command to close the shutdown window. -Scanned with the Trend Micro and Panda online tools in Regular mode and Safe mode (with networking). -Updated and scanned with: Avg Spybot Adaware both in regular and safemode -Downloaded and run the Symantec and F-Secure Sasser removal tool...both in regular and safe mode. But still....nothing....when rebooting...the same above errors occur. Has anyone else experience this recently? Any advice GREATLY Appreciated. -Thanks > PLEASE HELP OTHERS - Report back what did/didn't work for those referencing this thread.<

Forgot to include.... Also ran the MS Malicious Software Removal Tool Thanks > PLEASE HELP OTHERS - Report back what did/didn't work for those referencing this thread.<

Try this Removal Tooll called V Cleaner " If at first you don't succeed, destroy all evidence that you tried."

How to Remove Sasser worm virus http://www.pchell.com/virus/sasser.... http://ask-leo.com/what_are_lsass_l...