Help!!

[Rand0m Profile]

computer keeps shutting down. window pops up with timer. says its shutting down because it was initiated by NT Authority/System

then theres some file below it c:/windows/system32/lsass.exe

not realy clear on details but if you know whats causing this and how to stop it thatd be great. its shutting down again so i have to be quick and skim on details please help. thanks

[Buliwyf Profile]

Originally posted by Rand0m
computer keeps shutting down. window pops up with timer. says its shutting down because it was initiated by NT Authority/System

then theres some file below it c:/windows/system32/lsass.exe

not realy clear on details but if you know whats causing this and how to stop it thatd be great. its shutting down again so i have to be quick and skim on details please help. thanks

lsass - lsass.exe - Process Information
Process File: lsass or lsass.exe
Process Name: Local Security Authority Service
Description: Windows Local Security Authority Server Process handles Windows security mechanisms. It verifies the validity of user logons to your computer or server. Technically, the software generates the process that is responsible for authenticating users for the Winlogon service.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/A

removal tool: http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

[Rand0m Profile]

thanks buli I hope it worked. the tool deleted 19 files! That thing is annoying.

[Rand0m Profile]

that thing is gone but something is sucking up my bandwith. i dont know what it is but when i first sign on pages load at normal speed then get slower and slower...something is wrong. ive installed 4 times now, bah!

[LordShard]

update your virus scanner and firewall.

THen unplug your internet cable from the wall and scan for virii.
If you find nothing you might has well go ahead and defragment your harddrive.

Plug back your internet back into the wall with only port 80 open. Then update "adaware" and "spybot S&D" close your ports again and scan for malware that might have been indavertinly instaolled on your PC

(My personally experience is that many times people try to send me trojans through backdoors but my firewall blocks them and alerts me. Then I promtly add a perma ban to that IP address and eventually the number of them I get is reduced)