LSASS for server 2003

Hey,
we have server 2003 Small Business Edition, we went online to download the critical patches for it, which include the patch for sasser, and anyway, before we finished downloading it, we got it, we adventually got the patch on and after patching and installing the server we put NOD32 ver 2 on . because last time we put it one before we configured the server and it screwed everything up, we rang microsoft and they said dont put the anti virus on until last, so thats what we did.
so in the end, we have it all set up with NOD32 and update def's. We scan the server, and no virus? yet it still resets itself with file lsass.exe.

We download the cleaner by Paolo monti and that wont pick it up either, microsoft didnt have a cleaner for server 2003, and yeah, nothing will pick it up.

Maybe, is it because we got changed the service, Remote Procedure Call to on failure to restart the service rather than restart the PC, because that way it doesnt reboot on ya.

Anyway can some one please verify this.

Thanks guys

 

Does anyone have any ideas

 

Have you tried getting a newer version of imon.dll from eset?

You may have an older version of this file that does cause lsass.exe to terminate, which in turn presents a dialog that initiatea a 60-second countdown to shutdown if you click OK on it.

 

Hello,

I would like ask, Can You solved problem ?
I think, I have same error.

thank You ?

 

Contact ESET support for fix file. This appears to be some kind of NOD32 vulnerability since it came from nowhere...

 

It is a problem with IMON, there are newer versions around, send a email to support@nod32.com and they will send you a newer version or a link to download a newer version of IMON.

Cheers

 

The newer version (2.0.10, a.k.a.the beta version) does not necessarily fix the problem. This is with WinXP Pro. Problem with it killing the LSASS process still occurs intermitently. It appears that they have more work to do with this 'fix' before it is really fixed.

Steve

 

Yeah but bugs don't happen all the sudden. I was using my PC a week ago as usuall and bam lsass rpc error came from nowhere and was there until i changed imon.dll. Nothing changed in software config,even after full disk format was there. Bugs (or minor errors) don't do this.

 

All I can say is, I have been advised by Eset that they are aware of the problem and are currently working on a fix...

Cheers

 

thats good to hear then