Recently my main server is shutting itself randomly.

MS Server 2003 r2.
Fully Patched

DC, AD, DHCP Server, DNS Server

I have thes two reports that occur one after the other whenever this happens. I'll list them below.

I have googled this a lot and most seem to think it is the sasser worm. I know about the sasser worm from dealing with desktops over the last few years and except for the shut down it doesn't strike me as the sasser. I have also found this from a lot of people posting with same server issue. Replies say it's ths sasser but the servers then check out clean.

Can anybody point me in the right direction on this issue?

Thanks

Chris


************************
Here are the two messages

***
A critical system process, C:\WINDOWS\system32\lsass.exe, failed with status code c0000005. The machine must now be restarted.

****
Faulting application lsass.exe, version 5.2.3790.0, faulting module nvappfilter.dll, version 2.2.0.488, fault address 0x00005197.