I have been noticing on my Server 2003 box, that occasionaly the computer mysteriously reboots. When I log back in again the standard error reporting box comes up and says something like "LSA Shell has crashed". I have never been around when the computer rebooted though, I only came back to have to login again to see that error, so I don't know what happens before the computer roboots. Anyone have any ideas on what the "LSA Shell" is and what is causing the errors? Thanks.

Is windows fully updated?

That could be the cause of a sasser infection , try running Stinger and report back if it finds something please.
See for a link below in my sig.

I ran it and it found no viruses. I did however update windows, including the patch that prevents sasser, and so far no reboots. I'll tell you if I have the reboot problem again.

I think that Stinger should have found it if it was a Sasser infection , but it never hurts to double check. Also give this one a go:

http://securityresponse.symantec.com...oval.tool.html

That one says sasser wasn't found on my system. Still no reboots too, and it's been a few hours.

No Sasser then , but that is good news ofcourse. But somehow winupdate aparently fixed the prob. See , MS isn't all bad lol.


Let's give it a bit to see if it's really gone. :smiley:

About 20 hours and no reboots, so I think it's safe to say whaever caused it is fixed.