526 Posts

June 1st, 2004 04:00

Even thought you logs looks clean AND you have done all the windows updates

and yet your windows seems to crash the LSA shell (export Version)

rescan your comp with stinger

http://vil.nai.com/vil/stinger/

You would need to get a

1. firewall A.S.A.P

.Free zone alarm
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp

2. You would need to close port 445 (instructions in the link below)

Windows XP - Home User Self-Defence
http://www.uksecurityonline.com/husdg/windowsxp/close445.htm

More info on LSA

http://snakefoot.fateback.com/tweak/winnt/service/lsa_exploit.html

 

2 Posts

June 1st, 2004 20:00

Navin Kurian..
 
Please accept my most sincere "Thanks" & appreciation for the help you have given to me and all of the others that fail to come back, to acknowledge your assistance.  It must be discouraging at times, when you never hearing back if they were successful or a simple "Thank you."
 
Still have  Norton  not functioning as it should.. no auto=protection running icon on start bar nor email protection.  Have manually clicked on live updates... it appears to do so, and so far says everything is updated, nothing new. 
 
Wasn't aware of XP's firewall, so I did install ZoneAlarm, but uninstalled and then  enabled XP .  May have been without either when I was trying to download the patches and had those "shutdowns." 
 
I have disable XP's & reinstall ZoneAlarm... or should they both be running?
 
Have run Stinger... just using the default setting.  However, after it finished ..noticed it had only scanned half of the number of files the others had scanned. It found nothing, was "Clean"  but I open "preference"  and saw there were "no" check marks in "boot section" nor in "scan all files" box.   
 
 Plus reread, more carefully McAfee screen directions, didn't see... "for Xp" should have disconnected Restore" and rebooted before running Stinger.  Was this okay?  Or should I rerun ...turning off "Restore and putting checks in boot" & scan all files? 
 
 Well, think I will rescan without the "Restore" enabled, but what about checking to scan "boot &/or all files?"  Is that necessary?
 
 Lastly for now, XP is still very new to me,  but these two things happened...
First, after getting those Microsoft patches, had a small unopened window, on my startbar, wouldn't open when I left clicked on it so I right clicked and it said something like?? "Greeting from Cy Or Sy"  happened so quickly.... as I was clicking on to "close" and it did close. But  have had  a clean virus/everything scans after this happened.
 
 Didn't give it much thought until  this morning another icon on the start bar, claiming to be the Desktop wizard.  Said that some of my desktop icom were not being used, then placed a white ball and said to click on it. I didn't click on it, it stayed awhile then disappeared, returned once again with the same message and finally disappeared and didn't return.  Was this legit?  Haven't used that computer enought yet to know so I thought I would ask. 
 
Will let you know how it's going after reading what it said to this post....
No Events found!

Top