help me please i am suicidal

[jimtoon]

I have just gone on to XP. Everytime I log onto the web with btinternet, I get the following message.

This system will close in 30 seconds, this was caused by NTAUTHORITY/SYSTEM. C/WINDOWS/SYSTEM37/isass.exe closed with 1073741819.



Please help i really am about to throw the damn thing out the window

[ESALADUANE]

It looks like you've encountered Sasser. See here from Microsoft:
http://www.microsoft.com/security/incident/sasser.asp


Here's the scanning and removal tool.
http://www.microsoft.com/downloads/d...displaylang=en

[jimtoon]

Thanks but this is a setup problem, i got it on my first time going on the net, i know there is any easyway round thid but just can't remember

[LooseChippings]

jimtoon

there are 2 very similar files that you can have on your system

LSASs. exe is a system file used for security bits and pieces.

ISASS. exe however is a something to do with a Trojan.

Do as Esaladuane recommends and you should get sorted.

[njovin]

Jimtoon, this is NOT a setup problem. This means your computer has not been patched for the Sasser worm. Your computer will continue to do this whenever you connect to the internet until you patch your computer. You can download the patch here:

http://www.microsoft.com/downloads/d...displaylang=en

[jimtoon]

Guys, I did what you told me, even though I knew it wasn't a virus, and it came back no infection present.
The message I am getting is THIS COMPUTER WILL CLOSE DOWN IN 30 SECONDS, CAUSED BY NTAUTHORITY/SYSTEM THE REMOTE PROCEEDURE CALL(RPC) SERVICE TERMINATED

I remember someone else asking about this awhile ago, all they had to do was make some adjustments somewhere, please someone help.

[ESALADUANE]

To stop your machine from shutting down when this message is displayed, go to the start menu and select run. Then type "shutdown -a" (without the quotes) in the text box and click the OK button. This will stop the machine from shutting down. However, this is just a symptom. The cause is an exploit of your RPC service.



Another way (this is from Microsoft) to keep your computer from shutting down:


In many cases, on both Windows 2000 and XP, changing the settings for the Remote Procedure Call (RPC) service may allow you to connect to the Internet without the computer shutting down. To restore Internet connectivity to your PC, follow these steps:

1. Click Start > Run. The Run dialog box appears.
2. Type: SERVICES.MSC /S in the open line, and then click OK. The Services window opens.
3. In the right pane, locate the Remote Procedure Call (RPC) service.

CAUTION: There is also a service named Remote Procedure Call (RPC) Locator. Do not confuse the two.

4. Right-click the Remote Procedure Call (RPC) service, and then click Properties.
5. Click the Recovery tab.
6. Using the drop-down lists, change First failure, Second failure, and Subsequent failures to "Restart the Service."
7. Click Apply, and then OK.

CAUTION: Make sure that you change these settings back once you have removed the worm.

[jimtoon]

Problem resolved i think, once i could keep it online i was able to get the service pack and security upgrades, seem to be working fine now thanks.

[Jazz]

Hi jimtoon

Get yourself a quality, updated and properly configured Firewall, asap.........Even better, combine the Firewall with a NAT enabled Firewall router.

The Firewall inbuilt in XP only stops incoming connections, not outgoing connections. IOW, browsing habits and any information with respect to spyware, adware, etcetera, can still be sent to all and sundry.

Free Firewalls, along with AV. are out there: -

http://www.google.com/search?hl=en&i...free+firewalls (Free Firewalls).

http://www.google.com/search?hl=en&l...free+antivirus (Free AV).

Good luck

-=JAZZ=-