System Automaticall Restarts-Please help

feelfree2mailme · 07-06-2005, 07:58 PM

Please help me.
I'm using Windows XP. Even after installing a fresh copy of XP after formating, I frequently get error like LSA export version crashed. The system will shutdown in 1 min. And then the timer starts.
I dont understand why it should come even after installing a fresh copy of windows.
Please help.

paraman · 07-06-2005, 08:05 PM

You seem to have been infected by some virus/worm. Can you do a virus check?

Nimda · 07-06-2005, 08:08 PM

Yet another Sasser problem. Visit:
http://www.pcreview.co.uk/forums/thread-105635.php

khattam_ · 07-06-2005, 09:18 PM

Make sure that you have installed latest security updates............. Man do a virus check and stay up-2-date

feelfree2mailme · 07-06-2005, 11:49 PM

I've AVG and it's updated and yet I'm facing the problem.
Thanks for the link Nimda

anomit · 07-06-2005, 11:50 PM

Check if any file like Isasss.exe is running in Win Task Manager. If yes,

Download the Symantec Removal Tool for W32.Sasser from here

mohit · 08-06-2005, 03:16 AM

better upgrade to service pack 2 after u remove the worm ... or still better do a complete reinstall and patch windows xp with sp2 . u will be free from such annoyances and your pc will be far more secure.

Nimda · 08-06-2005, 10:56 AM

Oh and after removing the worm, make sure you install a good firewall if you don't want to get infected again within 10 minutes. I recommend ZoneAlarm.

Zonealarm: http://www.zonelabs.com

feelfree2mailme · 08-06-2005, 12:32 PM

Thankyou guys for the support.
I'm still working on it though.
The symantec sasser cleaner didnt show any sasser worm.
I also get a "Generic Host process for win32 services"
and the system starts the shutdown countdown.
I formated c:\ and re-installed 2 times but I think the worm is sitting is D:\ which I cant afford to format.

Any ideas guys?

paraman · 08-06-2005, 01:58 PM

Do you have SP2 installed or not?

club_pranay · 08-06-2005, 02:41 PM

smells like MS blaster worm!!!... pls search the forum to find a way to get rid of it.. best way out...get SP2
or go here...norton support
happy worm hunting

feelfree2mailme · 08-06-2005, 04:56 PM

Sorry to bother u guys again.
I get both the error messages. lsass and Generic Host process for win32 services. And then the timer starts.
Does that mean i've both the sasser and MS Blaster virus?
I do not have SP2 installed yet. Will installing SP2 at this stage help?
Come on guys, u r the genius', tell me what to do?

feelfree2mailme · 08-06-2005, 06:54 PM

I've run the sasser and blaster removal utility and yet it still shows that annoying message.
Please help.

saROMan · 08-06-2005, 08:59 PM

well bud plz see This for Generic Host process for win32 services error ..and see if it helps..and see this and No. 85485-85488 Here for LSA export version crash..also its advised to install Sp2 ASAP ..for greater protection against such threats in the future....also d/l Hijack this ..and post ur Log file for better rectification....

abhinavchadda · 08-06-2005, 10:45 PM

well i cant say how to get rid of that problem but you can do one thing go to run and just type "shutdown -a" to abort the countdown...in this way at least it will not restart.....could be handy till u find a solution for it...

it_waaznt_me · 09-06-2005, 01:06 AM

Umm First of all you should install a Firewall so that you dont get infected again ..
Yes installing SP2 will cure you of both the problems .. Go for it..