i'm sure this is an old topic but i just wanted to make sure. we all know the issue about lsass.exe, and downloading a patch from microsoft would at least solve it. i'm sure my unit is sasser-free but i'm still getting this lsass terminated thing . i've read from a site that this is caused by buffer overrun. is that true? i have tried doing the "shutdown /a" thing to stop the system from rebooting but it never worked. i guess its just for the "remote procedure call termination". i also have symantec's fix sasser tool. it scanned my unit but found no worm. what's happenin with my unit? pls help me...

Patch from microsoft was supposed to fix it, but if it didnt, to prevent the restart, you can disable system restore. Then, the system will not force the reboot.

If you dont know how to do it, just right click My Computer, go to properties, and go to a System Restore tab, there, click the check box to turn it off.

If you are a careful, and smart user, you do not really need system restore.

Have fun.
Tim

use scanner by "regucare" and it detects it works even ma sys ad it