Sasser or not Sasser (W2K)

[ALF_II]

Hi,

I get the stupid message that the computer will shutdown in 60 seconds - with error code 128 in lsass.exe.
I checked any of sasser files and none exists. I checked the registery, but it seems normal.
Some times I get this message 3 or 4 times a day, sometimes I'm OK for days.
What is this? a new worm that is like sasser?

Alf

[SystemEngineer]

I would suggest you make sure your ant-virus software is up to date and you have all the appropriate updates from Microsoft installed on your computer. You should also check there is not any spyware or applications which may be causing this problem.

Do you get this problem after doing something specific, or is it just a random thing?

When the message appears to stop the shutdown:
Click Run on the Start Menu, and type shutdown -a

Kind Regards

[ALF_II]

Thanks for your reply. I checked for sasser by a tool provided by CA, and it couldn't find it.

I would update my anti virus software. But windows update is a bit scary for me. I heard hororr stories about people applying updates in rush to avoid that worm.
Would a fire wall stop that?
Also, When I try to type shutdown -a. it doesn't recognize the command

[ALF_II]

I think the problem is solved by a personal Firewall. So far so good.
I don't know how I was not infected when it keeps coming back to shutdown my computer.

The program that is blocked by the fire wall almost every 30 minutes is called "ntoskrnl.exe"

I hope someone with more knowledge explains what is happening.

Thanks