Aces High Bulletin Board

General Forums => Hardware and Software => Topic started by: WldThing on August 27, 2004, 12:03:49 PM

Title: What do i do??
Post by: WldThing on August 27, 2004, 12:03:49 PM

Within the last few days ive been having a serious computer problem,  once i start up my computer ill go on the net and browse,  etc..  Like ive always done before..  Within maybe 10 minutes my computer sends me an error message stating:  

This termination was issued by NT Authority/System

C:windows/system32/lsass.exe  was Terminated.  Status Code
-1073741819

There was a bit more but i thought this was the relevant info,  if anyone has any idea what this is please help!!

Or if i have to i will reformat,  on XP Pro what key do i need to double tap?  F5 or F8?

Thanks!

Title: What do i do??
Post by: humble on August 27, 2004, 12:29:11 PM

W32 SasserB worm....

http://housecall.trendmicro.com

Run this...

Title: What do i do??
Post by: WldThing on September 01, 2004, 04:21:14 PM

It didnt fix it humble :(   I ran the virus check thats on that website and deleted anything that had came up but nothing..  It's still happening,  plus now i cant even load up AH,  it will reboot me back to windows..

Anyone else with an idea?

Title: What do i do??
Post by: AaronM2 on September 01, 2004, 04:50:42 PM

Hmmmmmm go here this will find it :D

Title: What do i do??
Post by: AaronM2 on September 01, 2004, 04:50:43 PM

Stupid Post i did 2 heres the link its from McAfee heres the link http://vil.nai.com/vil/stinger/

Title: What do i do??
Post by: OOZ662 on September 02, 2004, 02:30:31 AM

Make sure to run one (or both if you have that much time) of those removal programs in normal AND safe mode to get past any hidden file/read-only issues.

I can't remember how to get into safe mode on ME, but you have to hit F8 repetedly on bootup for the XP safe mode.

Title: What do i do??
Post by: Ohio330 on September 02, 2004, 01:31:53 PM

You really need to get a virus killer.  I can assure you that
what you have is a worm.  Just deleting a file doesnt kill
some of these at times.  Some nasty ones have hidden files that
will rewrite the worm back on your drive after you deleted them.

Title: What do i do??
Post by: Reschke on September 02, 2004, 02:11:29 PM

I had it and the only way to get rid of it is to run the virus removal tools with System Recovery turned off and be in Safe Mode. To get there hold down the F8 key on boot up and you will get into the menu selections.

One other thing is to make sure you are completely cut off from the internet when you do this. If on cable modem or DSL then unplug the cables/lines to your modem and then go to Safe Mode.

If that doesn't work then you have no choice but to format the drive and start all over from scratch. Also when I got this it ended up having another little nasty attached to it that eliminated all the windows networking components that allow you to get on the internet as well.

Good luck!

Title: What do i do??
Post by: WldThing on September 02, 2004, 10:12:19 PM

I believe i got it,  but AH doesnt want to work (Same problem),  ill re install it,  hopefully it will work,  thanks again everyone!

Title: What do i do??
Post by: humble on September 03, 2004, 12:16:54 PM

hope you got it worked out, one of the nastiest worms I've ever seen. Not sure what type of antivirus you use...

http://www.grisoft.com

AVG is suprisingly good, the freeware is better than either norton or mcaffee (IMO) and the 7.0 version is even better (really don't need it however). I've never had a system with it get hit by anything...however I had a system with norton get hammered by same virus you got...

Title: What do i do??
Post by: WldThing on September 03, 2004, 01:51:17 PM

Cool,  ill try that out..  And i found out why AH wouldnt load on my system,  with this sasser worm it reversed back to the original DirectX version,  8.0 ..  Now i just have to find the Dx9 to redownload and i should be set..