I am being seriously messed with! HELP!

  1. #1
    lonelyjeff is offline Newbie

    I am being seriously messed with! HELP!

    This is my problem:
    Installed fresh copy of win xp, however it needs 50-odd updates. the problem is that after a few mintues of connection to the internet I get a message saying that I chose to end LSA shell, this is soon followed by a message saying that a shutdown has been initiated by NT AUTHORITY\SYSTEM.

    I had a similar problem before with msblaster worm (I think) and I'm sure one of windows security updates will fix it. Problem is I can't stay online long enough to get this stuff or even see what it all is.

    Could someone please tell me the file I need to d/l to stop this happening. I have firewalled the connection btw.

    Thanks very much
    Last edited by lonelyjeff; 07-07-2004 at 06:18 PM.


  2. #2
    Rainbow32 is offline Junior Member
    Go to Steve Gibson's site and get the utility to stop DCOM.
    http://grc.com/dcom/
    Here's some sites to download the patches and removal tools.
    http://securityresponse.symantec.com...oval.tool.html
    http://www.microsoft.com/downloads/d...displaylang=en
    http://support.microsoft.com/?kbid=833330
    Last edited by owen; 31-07-2004 at 10:35 PM.

  3. #3
    owen is offline D-A-L Team Member (UK)
    Save 20% on AVG Internet Security 2012 Suite!
    The problem doesn't sound like the Blaster Worm and Blaster has pretty much disappeared now.

    The problem sounds more like Sasser. Have a look at this article for the removal tool, full instructions and how to temporarily stop the constant shut downs.
    Last edited by owen; 31-07-2004 at 10:36 PM.

+ Reply to Thread