UGN Security
i have an armada e500 laptop and i jut bought windosxp home for it and when i connect to the internet i have dsl and an error that say lsa shell export version has encountered a problem and needs to close after this about two min later a nt authority system is shuting down your computer i have 1 min to save my stuf than it shuts down with a 1073741819 status code
i have been to many other sites about this but none help
one says it is a sasse virus the other say to get a firwal and to upgrade
i tryed comand promt shutdown -a but that did not stopit i up dated it and the problem still ocurs i just updated it to sp2 this a fresh cope of xp too i just bought it 3 days ago andformated the hard drive and instaled it so nothing was on the computer i dont know what it could be
maybey a virus but from ware should i reinstal xp and download the sp2 it edition and instalit before i contect to the net what should i do i have norton antivirus 2004 and it has been updated so what is the prob.
You should try and search for the sasse virus and try to remove it manually, or you can download the sasser removal tool from symantec ( HERE ).

Also when you install your Windows XP it helps to unplug your network cable, if you connect to the internet through the network card for example, since your computer can be attacked and can get infected before the XP installation even finishes.

Also before downloading anything or before you even connect to the internet turn on the XP firewall, since from default is not turned on.

Hope this helps.
quick question about something somewhat related:

getting the same message on a Win2K box. ran sassaer removal tool, ran all windoze updates, scanned (in safe mode) for viruses. yet when i boot into normal mode, after a couple of minutes, i get the lsass error and a reboot. using the latest AV dats and there is no spyware (as far as spybot, adaware, and spysweeper are concerned) on the machine. any ideas?
Yeah, you should check out the removal tool for the gaobot or the agobot worm, located here . You should also use a firewall.

Hope this helps.
man how could the worm get on my system when i just instaled windows
i went to microsoft .com first website so where would i get it from
i did the searchthing and it did not find any thing
When windows installs it configures the network card and if you use the network card to connect to the internet (for example network card + cable modem) after windows configures it and allthough the windows instalation is not over and goes on for another 5 minutes or so, your computer is just a sitting duck without any protection in a sea of zombies who allways scan and try to find vulnerable machines. SO BEFORE you connect to the internet you must TURN ON the firewall.

If you check the logs of the firewall you would be amazed to see how many attacks take place in 5 minutes.
© UGN Security Forum