What is wrong with my lsass.exe file?It making my computer shutdown while on line,and how do I go about fixing

Answer 1

Prerequisites:
In a case of a trojan/virus, You need to identify the name of the virus/trojan before you can eliminate it.
See that you have installed and updated an antivirus and an antispyware software. If not, get one now
http://yanswers.blogspot.com/2006/10/essential-free-internet-security.html

Download and run free registry cleaner and scrap cleaner softwares
http://bestofrest.blogspot.com/2006/11/regscrubxp-registry-cleaner.html

http://bestofrest.blogspot.com/2006/11/ccleaner.html

To secure yourself follow the steps below
1) Disable system restore if you are using winME/XP
Click on start > all programs > Accessories > System Tools > System Restore
Click on System Restore settings.
Check the box to Turn off system restore on all drives.
press apply. press ok.

2)Boot in safe mode, by pressing F8 during booting of computer, if it doesn't get in safe mode read this

http://yanswers.blogspot.com/2006/10/boot-in-safe-mode-in-windows-xp-laptop.html

3) Run the antivirus and antispyware scans while in safe mode. Note down the name of the virus/spyware when detected.

4) search using google for manual removal instructions of the detected virus/trojan/worm. Copy the instructions on the hard disk, and follow the instructions.
http://viruscleaner.blogspot.com/2006/12/general-steps.html

Answer 2

As the previous two posters stated, you have the Blaster virus, or MS Blaster as it was once known. I, too, had this virus back in 2003. Click the following link to download the virus removal tool from Symantec:

http://securityresponse.symantec.com/avcenter/FixBlast.exe

If you have antivirus software installed on your computer, update it and then run a full scan. If you do not have antivirus software, download and install the following FREE antivirus program; it is a very good one:

http://free.grisoft.com

Remember to update your virus definitions every day, if possible, and run a scan at least once a week.

Good luck!

Answer 3

You have a version of the "Sasser" virus (gets its generic name from the lsass file) - also called "Blaster". Disconnect your computer from the Internet. Then run a good virus program to remove the virus.

Answer 4

You have the "Blaster" worm. Big nasty thing, infected thousands of businesses a couple of years ago. Lucky you :)

http://www.symantec.com/security_response/writeup.jsp?docid=2003-081119-5051-99

Read here on how to remove it.