HELP

Since it only happens when you go online, it does indeed seem like one of the worms that uses security holes in WinXP/2k to crash certain critical programs.If you are using Windows XP, I suggest you try one thing first.Go to start->settings->network connections->Local area network (or similar)->advanced->enable firewall->OK.If the problems stops after this, you can easily download the security updates for Windows to remove the problem fully.Always run checks on your computer afterward.This message has been edited by Melchior, 07-04-2004 02:19 PM

There are some non-worms that regularily uses certain exploits in the OS. The only thing they do is crash your computer, but don't actually infect it. I had a lot of problems with that some time ago.It could be a worm, in which case he should be able to detect it via anti-virus or anti-spyware programs.The thing is, computers infected with most Blaster variants (especially the ones first developed) show very well that they are messed up. They start running very very slow, and messes up connection to things such as IRC and such.If the computer works perfectly fine up until the shutdown, I think it's something else.

Btw, since it seems to target lsass, it probably is Sasser as Lindum figured, which can both act as a normal worm and infect the computer, or if that's not directly possible, still crash a computer whenever it's online.Still, all variants can be fixed by first firewalling the computer to prevent shutdowns, then download and run the various fixes/searches.This message has been edited by Melchior, 07-04-2004 02:34 PM

Mmm, Zone Alarm will automatically block all those exploits. The only problem is that the free version is just a 30 day trial version, and it does take quite a bit of resources compared to a hardware firewall.Definitely better than leaving your computer wide open, though, and relatively easy to setup even if you haven't used a firewall before.