Think you are right with that. My parents PC had this a while back,
nightmare to get rid off but was def a virus. Suggest you scan the machine
or rebuild it.

Cheers,

>James.
>
>James Park.
Infrastructure Specialist.
EDS Production Engineering
Service Delivery
Systems Management Team


-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf Of
Christoph Pilgram
Sent: 15 February 2005 08:23
To: ADSM-L AT VM.MARIST DOT EDU
Subject: AW: Windows ASR

Hi Karin,

Is it possible that you have restored a virus. I remember the same symptoms
(error in process lsass.exe followed by an automatic reboot) were caused by
a virus (was it the virus called sasser ? Don't know exactly).

Best wishes
Chr. Pilgram

Boehringer Ingelheim Pharma GmbH & Co.KG        
IT Department                   
Germany



-----Ursprüngliche Nachricht-----
Von: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] Im Auftrag von
Karin Dambacher
Gesendet: Dienstag, 15. Februar 2005 09:10
An: ADSM-L AT VM.MARIST DOT EDU
Betreff: Windows ASR


Hi all,

I tried to do an ASR-Backup for my Windows Server.
After ASR Restore, TSM restored the data. After reboot, there is the
message:

lsass system error
When trying to update a password, the return status indicates that the value
provided as the current password is not correct.

After 5 sec. there is a new reboot.

Does anyone know, what is running wrong?

Best regards, Karin
EMPRISE Network Consulting GmbH
Albstraße 14
D - 70597 Stuttgart

t_ +49 (0) 711 - 99 00 83 - 0
f_ +49 (0) 711 - 99 00 83 - 9
m_ +49 (0) 172 - 4033256
mailto:karin.dambacher AT emprise DOT de

http://www.emprise.de/enc

Ein Unternehmen der EMPRISE Gruppe

Diese e-Mail einschließlich ihrer Anhänge ist vertraulich. Wir bitten, eine
fehlgeleitete e-Mail unverzüglich vollständig zu löschen und uns eine
Nachricht zukommen zu lassen. Wir haben die e-Mail beim Ausgang auf Viren
geprüft; wir raten jedoch wegen der Gefahr auf den Übertragungswegen zu
einer Eingangskontrolle. Eine Haftung für Virenfreiheit schließen wir aus.

This e-mail and any attachments are confidential. If you are not the
intended recipient of this e-mail, please immediately delete its contents
and notify us. This e-mail was checked for virus contamination before being
sent. Nevertheless, it is advisable to check for any contamination occurring
during transmission. 
We cannot accept any liability for virus contamination.