Hmm sorry its taken so long for someone to reply, i'm going to try sorting each problem out ocne at a time 
, so i'll start with libexpat.dll, the problem with this is it can be real or it can be spyware, i've just done a check on libexpat.dll - File Information [Is mine authentic?] and mines real just wondered if you could try checking that for me.
The next problem lsass.exe i've read on a forum and found that "Running "shutdown -a" from the run dialog suspends the countdown...
haven't had a problem since."Works but if you don't get a shutdown error i'll look into it more 
.
The multimedia card error is by somthing whats plugged into your computer like a multimedia card 
.
And the last error
CAUSE
This error message is due to a buffer overrun vulnerability on Windows NT 4.0, 2000, XP, and Server 2003. The RPC service that runs on these systems does not properly check message inputs under certain circumstances. For more detailed information regarding this vulnerability see
Microsoft Security Bulletin MS03-010.
Note: If an attacker is able to successfully exploit this vulnerability they could gain complete control over a remote computer. This would give the attacker the ability to take any action on the system that they want. For example, an attacker could change web pages, reformat the hard disk, and / or add new users to the local administrators group.
SOLUTION
To resolve this issue in Windows 2000 and XP you will need to perform the following steps:
- Change the settings for the Remote Procedure Call (RPC) Service in order to connect to the internet without the computer shutting down
Note: This does not work in every case.
To change these settings you will need to perform the following:- Right-click the My Computer icon on the Windows desktop or in the Start menu.
- Select Manage. The Computer Management window will open.
- In the left pane, double-click on Services and Applications.
- Select Services and a list of services should appear.
- In the right pane, locate the Remote Procedure Call (RPC) service, it will have a Status of "Started". Note: This will be the first in a listing of two Remote Procedure Call (RPS) services.
- Right-click on the first Remote Procedure Call (RPC) service listed.
- Select Properties.
- Select the Recovery tab.
- Using the drop-down lists, change First failure, Second failure, and Subsequent failures from Restart the Computer to Take No Action.
- Click on Apply and then OK.
CAUTION: Make sure that you change these settings back after completing the final step to remove the worm.
- Verify which service packs have been applied as well as which version of Windows you are running. To do this:
- Right-click My Computer on the desktop.
- Select Properties. Operating system information will be listed in the window that comes up. This will include what version of the operating system is running as well as what service packs have been applied to it.
- The following service packs need to be applied right away: Note: The service pack version will depend on what operating system you have on your computer.
- If you are running Windows XP version 2002, Service Pack 1 will need to be installed. If this has not been applied to your system you can obtain it by doing one of the following:
- If you are on campus, are connecting through our modem pool, or are accessing the campus network through WiscVPN, this can be downloaded from the Electronic Shelf at http://shelf.doit.wisc.edu/PC/WinXP-Fix/xpsp1.
- If you connect through DSL, cable modem and / or another internet service provider this can be downloaded from https://www.microsoft.com/WindowsXP/pro/downloads/servicepacks/sp1. Be sure to select the Express Installation.
- If you are running Windows 2000, you must have at the minimum, Service Pack 2 applied. Please note that Microsoft no longer supports this version and newer service packs such as service pack 3 and 4 are recommended and preferred. If this has not been applied to your system you can obtain it by doing one of the following:
- If you are on campus or are connecting through our modem pool service packs 3 and 4 can be downloaded from the Electronic Shelf at http://shelf/PC/W2k-Fix
- If you connect through DSL, cable modem and/or another internet service provider this can be downloaded from Windows 2000 Service Packs.
Hope this helped a bit
Good luck
Edit: Yeah reading about it's most likley spyware like hengis said, i would try following his advice but also try mine as well =)
Aw just beat me
PC Help Forum
» Operating Systems
» Windows XP/2000
»
[Resolved] Recovery
[Resolved] Recovery
Linear Mode
