LSA shell error

I trying to solve a problem with a users computer that I need a little help with. I have just finished installing XP with service pack 2 on the computer and it keeps giving me a LSA Shell (Export Version), error message can anyone shed a little light on this subject for me. If any more information is needed please let me know.

Answer Wiki

Thanks. We'll let you know when a new response is added.

I remember a while back having problems with the Sasser Worm and LSA shell errors. You’ve fixed the problem with SP2 but perhaps the pc is infected.

Go into event viewer and get the event id numbers for further troubleshooting if Sasser isn’t the problem.


Discuss This Question: 4  Replies

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Jcvaug
    Get Symantec Sasser removal tool. Your PC is infected. While you are at it, install the free software packages "Ad-aware" and "Spybot search and destroy". Also install Microsoft trial version of AntiSpyware. Run all three one at a time until all traces of ads, spies and other malware have been removed. Then run the freeware program on a regular basis. You will be surprised at what you catch just reading e-mail from hotmail, yahoo or whatever your outside mail is.
    15 pointsBadges:
  • TedRizzi
    exerpt from Microsoft KB artical PSS ID Number: 841720 After you install the 835732 (MS04-011) security update on a computer that is already infected with the Sasser worm, the computer may continue to generate network traffic on the affected Transmission Control Protocol (TCP) ports to try to spread the worm infection to other vulnerable computers. If your computer is infected with the Sasser worm, you may experience one or more of the following symptoms: Your computer performance is decreased or your network connection is slow. You may see a dialog box that contains text that refers to LSA Shell. Your computer may restart every few minutes without user input. It is also possible that you will not notice any symptoms of infection. For example, the second and third symptoms may not occur on infected computers that have the 835732 security update installed, although the computer is still infected and is still spreading the worm to other computers. For more information about the 835732 security update, visit the following Microsoft Web s
    0 pointsBadges:
  • Jayaramks
    First chech the microsoft site for saaser details at There are different variants of sasser and the following tool removes the sasser variants from A to F. Sasser (A-F) Worm Removal Tool (KB841720) >> Are you doing network install ?? Are you installing the XP on a clean disk or only on the os partition one ? Also you can download the windows anti-spyware, free ad-aware software and other such tools to avoid the further attacks. I will always suggest to do a clean install on all the pratitions , if it is possible, to avoid any kind of viruses and install the antiviruses before running any applications
    0 pointsBadges:
  • BinooDas1234
    Seems like Sasser virus.. Try this Microsoft Product...MSRT Visit this link and download the tool. You can also check your system online.
    10 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: