What causes the error message 'LSA shell has encountered an error' when you connect to the Internet?

Answer 1

LSA Shell ErrorsThis used to be caused almost exclusively by the sasser worm. You could simple download the scan and fix from McAfee.

There is now a more common worm that sasser that replaced. It may be causing the LSA Shell error. Your most common junk antivirus such as McAfee can detect and delete sasser. Most firewalls can stop sasser. This sounds more like the womourge worm. You can find and eliminate this with the tools from Symantec.

Here is more input:

• Although these sites are great to find help and answers some people don't keep up with the information being released every momment of every day and it is difficult to keep up with the ever so progressive virus world. Please search out as many casses of this and read all info pertaining to it before fallowing one post. You could just end up in circles over and over again.

• The solution is easy, somewhat. I take it when you receive the LSA Shell (Export Version) notice, a few moments later the System Shutdown Count appears? Not to worry. Just restart your computer, making sure that you are, in fact, disconnected from the internet. Then click Start, click Run, and in the white box type "cmd". A black box will appear, inside the black box, after your computer's administrater's name type "shutdown -I" (when typing this, don't forget the space between the hyphen and the word "Shutdown".) and press enter. The Shutdown Setting's window will appear. In the first box, type in your computer's name and click Add. Then in the box that reads: 20 seconds, type 9999. This will increase your time on the internet to about three hours!This will give you time to download Stinger, which can be found on the McAfee website. Stinger will find and repair this problem. Simple.

Solving the LSA Shell ErrorIt's simple and not that simple. Follow the services.msc technique:

1. click start -> Run

2. type "services.msc" (without the double quotes) and press Enter.

3. Double Click "Remote Procedure Call"

4. On the "Recovery" tab, change "Shutdown Computer" to "Restart the Service" for all Failure counts ie. 1st, 2nd and subsequent.

5. Press OK.

That should be the first step to preventing it. Then download any "Blaster Worm Removal Tool" from the net and scan your system for it. This shutdown is often caused by the msblast worm. That should fix your problem.

And if it continues, just do this everytime the shutdown count begins:

1. Select Start -> Run

2. type "shutdown -a" and press Enter

That's it. This solves everything. the countdown disappears.

Preventing the WormPrevention is better than cure.

If you had internet connection firewall (ICF) enabled, this wouldn't have happened. Worms use the LSA shell security flaw to get into the remote system. Enable the ICF by:

1) Right click connections icon in the Network Connections and select properties.

2) Go to advanced and tick ICF option.

This will evade viruses from getting into the system as it blocks all incoming connection requests.

Here is more input:

• Go to Start > Run> type services.msc and search for RPC, double click on it and on the TAB's go to Recovery, all the failure notices that say "Restar the Computer", change them to "Restart the Service", apply it and then reboot your machine. Once you reboot, it'll give the error message again, but will stop once you press ok twice, restart your machine and it shall be removed.

• Sometimes its not sasser or the msblast worm like for my case! So the thing is to go to run. type "services.msc" then go to the option "RCP" from there another window will pop up and click the recovery tab. change all three setting to "restart the service" and reset the comp. That should do it.

NoteIf none of these solutions worked for you, you can always restore Windows by using your original discs that came with the computer.