Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

problem with unexpected shutdown


  • Please log in to reply

#1
mraj27

mraj27

    New Member

  • Member
  • Pip
  • 2 posts
Hi,
Iam using 2000 server operating system, here iam giving my system's specifications.

320MB RAM
400 MHG PROCESSOR( X86 FAMILY)
20GB HDD

My system is shutting down suddenly by giving a warning message as

mraj27@gmail.com " save the things, your system is shutting down, due to d:\winnt\system32\lsass.exe terminated unexpectedly with status code 128."

please let me know what could be the problem?

Regards,
Raj
  • 0

Advertisements


#2
senshisteph

senshisteph

    Member

  • Member
  • PipPip
  • 41 posts
This is often caused by a virus. The version I have come across uses a remote procedure call (RPC) so to stop it shutting your system down long enough to fix it, the first step is to stop and disable the RPC service in Control Panel=>Administrative tools=>Services. Scroll down the list of services til you find RPC and right click on it. Select 'Properties' from the menu. Change the startup option from automatic to disabled, and also click 'stop'. This should prevent the virus from shutting down.
Now you should have time to run your antivirus software and zap the nasty!!

On a home system almost no apps use RPC so it is perfectly safe to leave it switched off. While you are in there you can also disable Messenger Service which will stop any those annoying Windows Messenger popups :tazz:
  • 0

#3
mraj27

mraj27

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
Dear Senshisteph,
Thanks alot for ur suggestion, but i have some doubt, The problem is due to termination of the file " lsass.exe." and that has been assigened to the service IPSEC plicy Agent.


means, IPSEC policy Agent service is having executable path as D:\WINNT\System32\lsass.exe.

Remote Procedure Call (RPC) service contains the executable path is D:\WINNT\system32\svchost -k rpcss

Remote Procedure Call (RPC) Locator service contains the executable path as D:\WINNT\System32\locator.exe

Is there any need to disable the service IPSEC polocy Agent along with Remote procedure call and Remote Procedure Call Locator. as it is having the file lsass.exe

please clear my doubt.

Thanks & Regards,
Raj
  • 0

#4
senshisteph

senshisteph

    Member

  • Member
  • PipPip
  • 41 posts
May be a different virus - that way always worked for me but viruses change, or it may be something else altogether. Hmm....

Anyone else any ideas?
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP