System Shutdown
This system is shutting down. Please save all work in progress and log off. And unsaved changes will be lost. This shutdown was initiated by NT AUTHORITY\SYSTEM
Time before shutdown: 60 Seconds
Message
The system process
'C:\WINDOWS\system32\lsass.exe'
terminated unexpectedly with status code -1073741819. The system will now shut down and restart."
Then it gives me 60 seconds and my computer restarts. I can suspend it by setting my system clock back a couple hours days or years. I ran Panda and came up with like a sdbot or something and only some tracking cookies on adaware. The sdbot was removed but I scan again and it keeps coming back. I would download SP1a, but you know, 28.8 dialup. Here is a complete HJT log. OH GOD NOT MSBLAST!!!!!!!!!
Logfile of HijackThis v1.99.1
Scan saved at 11:05:48 PM, on 9/10/2003
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CallWave\IAM.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\dwwin.exe
C:\Program Files\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.runescape.com/
O4 - HKLM\..\Run: [windows auto update] msblast.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1126062932\ee\AOLHostManager.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Internet Answering Machine.lnk = C:\Program Files\CallWave\IAM.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft...free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F37B04EE-83F4-4A24-8896-F45D6C7D25EA}: NameServer = 65.17.128.3 65.17.128.7
Ok MSBLAST is back. I just got rid of it the other day... Please help