Help - Search - Members - Calendar
Full Version: Shutdown Windows 2k pro
Gladiator Security Forum > Malware Help Forum > HELP! Think you are Infected?
samjeb
lsass.exe message: lsass.exe has generated errors and will be closed by Windows. You will need to restart the program. The computer then shuts down. I tried hijackthis, several virus and spyware programs and cannot correct the problem. I even repartitioned, and formatted the hdd and still have the same problem.
LoPhatPhuud
You post is confusing.

If you reformatted the hard drive using fdisk, and re-installed Windows, then the problem should disappear, provided you did not install any others programs first.

If the problem still exists, then either you copy of WIndows is corrupt, or you have a hardware issue.

Can you expand please?
samjeb
There were 4 lsass.exe files. I had one of my students delete all but one lsass.exe file. I left one in the C:\Windows\system32 directory and it seems to have cured the problem. We had over 20 computers in different classes have this same problem. It did not have this problem until Internet Explorer was opened. It would not even let us download any Windows upgrades it would shut the computer down before the download of the upgrade could be completed until we deleted all but one file.
LoPhatPhuud
It may have been spywre/malware using lsass.exe name, but not in the proper directory. That would explain the infection on local network computers.

We need a HiJAckThis log to continue..

Create a directory on your hardrive to save HijackThis.exe. A directory like c:\hijackthis. If you do not do this, you will not be able to use the backup/restore features.

Download HijackThis from:

HijackThis Download Site

Save this file into the directory you made previously and then run the program named hijackthis.exe. When the program opens click on the Config button, then click on the Misc Tools button, and click on the Check for update online button. When it completes checking/applying updates press the back button.

Now click on the Scan button and when it is finished click on the Save Log button. A Notepad window will open with the contents of this log. Click on Edit then click on Select all. Then click on Edit and then Click on Copy.

Create a reply to this post here and right click in message area and select paste to paste the log into the post.

Someone will reply to you after reading this post. DO NOT fix any entries unless you understand what you are doing.

To see a tutorial with screenshots on using HijackThis you can click on the link below:

How to use HijackThis to remove Browser Hijackers, Malware, & Spyware
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.