|
Answer» my comp will get to windows start up PAGE and then display this..
Isass.exe- system error
Insufficient system resources exist to complete the API
What does this meen and what can i do?It means you should post as much info about your flavor of Windows system information and what security apps you are running so we can assist further...
You're possibly infected, which takes as much info as you can provide. The worm exploits the Windows LSASS vulnerability, which is a buffer overrun that allows remote code execution and enables an attacker to gain full control of the affected system. To propagate, it scans the network for vulnerable systems. When it finds a vulnerable system, this malware sends a specially crafted packet to produce a buffer overflow on LSASS.EXE. This worm can cause LSASS to crash and force Windows to restart."
Microsoft indicates in a security bulletin entitled Windows XP Users: What to do if your computer has been infected by Sasser that you should:
Disconnect from the Internet Stop the shutdown cycle Mitigate the vulnerability Improve system performance Enable a firewall Reconnect to the Internet Install the REQUIRED OS update Check for and remove Sasser The exact steps are outlined on Microsoft's site, and they also link to a malware remover too, the Microsoft Windows Malicious Software Removal Tool.
http://www.microsoft.com/security/malwareremove/default.mspx
I have my doubts that this is actually our ever-beloved worm. I think it's just a matter of mistaking the letters. But to be safe...
socialoutburst, Copy EVERYTHING inside the quote box below (starting with dir) and paste it into Notepad. Go up to File > Save As... and click the drop-down box to change the "Save As Type" to "All Files". Save it as search.bat on your desktop.
Quote dir C:\WINDOWS\system32\lsass.exe /a h > result1.txt dir C:\WINDOWS\system32\isass.exe /a h > result2.txt Open/run search.bat and it will produce two Notepad files (result1 and result2). Copy the contents of each file and paste them here.
This METHOD isn't surefire, but it searches for isass in its most common location. You should, of course, run a virus scan also.This is why a lack of info especially in an infection topic can set things in motion down many paths...follow CBMatts ADVICE and the suggestions on system specs and more specifics etc.......
|