• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Computer shutting down when connected to internet

T

Thraxen

Diamond Member
A friend of mine brought me their PC to check. She said she was having problems with connecting to the internet. She thought it might be her modem. I took it home and booted it up. She just has dial up (and no ethernet port). I have DSL, but the account comes with dial-up numbers for use when traveling. So I connected to one of those. The modem dialed up and connected fine. But after about 2-3 minutes an error message pops up and gives a countdown to restart just like MSBlast does.

I checked task manager and didn't see MSBlast and I also ran the Symantec MSBlast removal tool and it found nothing. The message says something like, "lsass.exe has quit unexpectedly.... This is being initiated by NT AUTHORITY... Please save all your work. Your PC will restart in [countdown]" Something like that. I didn't write the error mesage down at the time and I'm at work right now so I can't get the exact message.

Any ideas on what this could be? Is it some sort of virus? I noticed that her Norton virus scanner has passed it's subscription time period, so it's probably way out of date. If I can get it connected I'll put AVG on there, but I can't connect to the internet right now. The PC is running WindowsXP Pro, but is several years old (i.e. no warranty). So I can always pull the HDD and connect it to my PC and do a virus scan on the drive.
 
that's the sasser worm, similar to msblast but different vulnerability.

fully patch it out using a CD and then update the virus software.
 
Well... I got the Sasser removal tool from the Symantec website and put it on her machine. But it said that Sasser was not found on her machine. So any other ideas on what could be causing this?
 
Originally posted by: Thraxen
Well... I got the Sasser removal tool from the Symantec website and put it on her machine. But it said that Sasser was not found on her machine. So any other ideas on what could be causing this?
Click to expand...
A different worm using the same exploit, perhaps. I suggest:

1) Disable System Restore and nuke the SR files

2) Enable Automatic Updates

3) Get the system fully patched (I know this is going to be no fun on dial-up, I'm a dial-up user myself)

4) Install ZoneAlarm. Here's my ZA after just a month or so: link Granted, some of those alerts are just "noise," but... 😉

5) Try the free McAfee Stinger tool.

6) Install the free Microsoft Baseline Security Analyzer 1.2 and address issues that it finds, particularly missing patches, shares, and weak/blank passwords.
 
Get the system fully patched (I know this is going to be no fun on dial-up, I'm a dial-up user myself)
Click to expand...

I plan to do that, but I have to get rid of the bug first because it's causing the PC to shut down every time I connect to the internet. I'm going to try that Stinger tool first, hopefully that will fix the problem.
 
What will fix the problem is to fix the vulnerability. You can remove, remove, remove the worms, but if you don't close the hole they're using to come in through... 😛
 
Well, I installed the security patch kit and it's still shutting down after connecting to the internet. I also ran Stinger and it did find a virus, but not the one causing the problem. I seem to be out of easy options. The only thing I know to do now is yank the HDD, connect it to my PC, and then run a virus scan on the drive.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top