Can't stay On-Line...

[caliphe]

Every time I go on-line I get this weird error message before the shut down counter.

LSA Shell (Export Version)

I don't get it, I tried the windows xp help. I need information on what I'm doing wrong.

[mobiker]

you probably have the W32/Sasser.worm

you can go to this link to read about it:

http://us.mcafee.com/virusInfo/defau...virus_k=125008


Good luck I have had calls on that already

[mobiker]

Also I believe stinger will get rid of that

[caliphe]

I have norton system works 2003 professional and it is updated and have been before the virus. I used stinger as well and there is no luck. My anti virus does not detect any viruses. I'm out of ideas.

[Rocketmech]

Look in Task Manager / Processes for
C:\WINDOWS\avserve.exe . Thats the worm . If you've got it, follow the instructions in this
FIX


***Be sure to disable System Restore and run Windows Update .

[mobiker]

I'm working on someones now and I had to uninstall the anti virus program and reinstall it because the viruses messed up the a/v program. It is a royal pain. They didn't keep windows and their a/v updated.

[Rocketmech]

Introduce them to Windows Auto Update.

[caliphe]

Task manager did not display avserve.exe any where in the list. So now I need more clues to what it is. Here is clear information on what is happening. I also am using system works 2002 professional instead of 2003. I'm learning like many others so I ask that you please be understanding. I did and know how to follow the instruction on the removal tool. When I scan nothing comes up. Everything has been up dated and this just started on 5/01/04. Removing the virus is not the problem. Finding it is. I have the removal tool from symantec for Gaobot and the Stinger program by McAfee. Trust me when I say that my Anti Virus program is up to date because it tells me. Could it be that I need a newer version? I am using Windows XP Pro.

LSA Shell (Export Version) Has encountered a problem and needs to close.
C:\windows\system32\lsass.exe'
status code -1073741819

That is as complete as I can get right now.

[mobiker]

I can tell you that for mcafee I had to get the new beta version of the dat files to catch all of the virus/worm. the newest released version did not catch it. I still had a couple of files that were not caught that I thought were suspect. This is a new version of a worm virus from what I here. Good luck. I was tempted to just tell them it had to be reformated and reloaded fresh. It would have been easier and faster I think.

the machine had 4 different virus total.

[Rocketmech]

https://www.microsoft.com/security/i...sser.asp#step3

Are you still getting the countdown? If yes,
then goto start menu -> run -> type shutdown -a , press enter .

[BipolarBill]

Hint:

Windows Update - often.