Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
I've got a few machine at my work that crashed a few days ago - before it crashed it gave an error message that LSASS.exe terminated and with a status code.... I didn't get a chance to write down the status code - What could be causing this reboots? It only happens once in a while where the user is forced to do 1 or multiple reboots. Plz help and thnx.
i am having a very similar problem with my home windows 2000 pc.
so far it seems to be caused by reading a certain post on a forum. i have read the forum every day since i built my pc and the problem only started this morning.
i have the same error message and the reason code was 128. i got a 60 second warning before an auto reboot. i went to the same post in the same forum once i rebooted and it happeded exactly the same again. i have run virus checks and updated with the latest MS updates.
Any ideas anyone?
0 
I have already 3 PCs with same problem in different places. Some sites says to disable windos automatic updates in Services. But the problem is, that I cant find this service in service list !
0
I have the same problem. I am currently trying to install the latest windows updates. I hope these help.
I recall that some time ago there was a similar problem with lsass. Then it was recomended that you install the latest updates. So I try it again. I don't have any other idea.
----------
The world is full of strange people!
0
have the same error message and the reason code was 128. i got a 60 second warning before an auto reboot. i went to the same post in the same forum once i rebooted and it happeded exactly the same again. i have run virus checks and updated with the latest MS updates
kunal thakkar
(rlsoftware.com)
0
Hi all!
A customer of mine has the same problem, and he's not infected with any known version of the Sasser-virus. I think a solution could be this:
http://www.jsiinc.com/SUBM/tip6100/rh6116.htm
I havn't tried it yet - has anyone else?
/ Fredrik
0
There is a microsoft article about this error message. There are problems when you install the windows 2000 high encryption pack and don't reboot and install other patches. see link
http://support.microsoft.com/default.aspx?scid=kb;en-us;301684
Tootles,
Gidget
0
1. Thanks Gidget!
2. Does anyone know how to stop Win2K from restarting in 60 secs so that I can find out what is wrong? As of now I only have 60 secs to download and run Stinger a-virus tool and no time at all to download patches from MS. Is it RPC that force restart?
/ Fredrik
0
hello,everyone
i have about 15 computers infected with this worm,out of 35.
This worm exploits the new LSASS vulnerability in Windows 2000 and XP systems. It's not destructive. Generates traffic at ports 445, 5554 and 9996.
norton antivirus and f-secure were able to find it but not to desinfect.
i`m working on this problem for almost 3 hours and i`m not able to solve it.
olso,if you can`t access the internet or it is working very slow it`s because of this worm.check this link:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SASSER.Bregards,cami
0
You can stop windows from restarting by typing :
shutdown -a
into console.
(Start-->RUN: enter "cmd", than type in the command)
0
For Windows 2000 machines:
1. From a Windows XP machine, copy the file c:\I386\shutdown.exe to a floppy disk or burn it to a CD.
2. When the Windows 2000 machine starts, immediately copy this file to the root of your C drive on the Windows 2000 machine.
3. Immediately go to "Start", "Run" and in the "Open" box type C:\shutdown -a
then hit "OK". This will prevent the machine from rebooting while you do the rest of the stuff.
4. Go to WWW.Antivirus.com and run Trend Housecall to get rid of the Virus.
5. If you can get to Microsoft's site, download the MS04-011 patch (I believe the file name is Windows2000-KB835732-X86-enu.exe) or have someone do in on a machine that is not infected and burn it to CD for you. Apply the patch to your machine. Do NOT reboot the machine after applying the patch.
6. Go to "Start", "Run" and in the "Open" box type shutdown -r and press "OK" This will reboot the machine and you should be good to go!Good luck everyone!
0
SOLUTION FOR MACHINES WITH MUTATED SASSER:
Intro: Have a customer with some sort of mutated Sasser-worm. "shutdown /A" or "shutdown -A" does not work to prevent LSASS.exe from crashing.
Solution:
1. *Quickly* enter the following at commandline:
echo dcpromo >%systemroot%\debug\dcpromo.log & attrib +r %systemroot%\debug\dcpromo.logThis info from: http://www.microsoft.com/technet/Security/alerts/sasser.mspx
2. Let the d*mn box restart.
3. Apply MS patch MS04-011:
http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx4. Restart.
5. Apply MS Sasser removal tool:
http://www.microsoft.com/downloads/details.aspx?FamilyId=76C6DE7E-1B6B-4FC3-90D4-9FA42D14CC17&displaylang=en6. Update Firewall and antivirus.
Done.
Good luck! / Fredrik Ekelund
0
I am running windows 2000 on my laptop which has been infecte with the sasser virus. I have applied Microsoft Patch MS835732 and now the situation is even worse. The machine re-boots automatically. It gets to the end of the 'starting windows 2000' and then restarts. Does anyone know how I can break out of this routine so that I can at least save some of my key files before I rebuild.
Cheers
0
I have 2 machines that are continually rebooting after the splash screen also. I did notice on those 2 that the computer rebooted during the patch installation. If anyone figures a fix out for this please let me know.
0  |
 IE and other problems
|
Someone Stealing Cycles
|
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
