I have been trying to help a retired fellow with his computer woes.  His machine runs fine until he logs onto his ISP, then it will shut down within minutes.  The error message has to do with lsass.exe, and the windows displayed conform exactly to those with a Sasser worm problem.  Yet, we can find no worm!  Symantec's tool to remove the worm finds none existing.  A Norton's AV scan says his machine is clean.  None of Microsoft's list of processes that are indicative of the worm are running on his machine.

Any tips?  Could this be other than a Sasser Worm?

Thanks for any help.

Gordon

              The NOSPIN Group is now accepting donatations
              to continue providing PCSOFT and our website.
           Visit http://freepctech.com to donate using Paypal