Home > Need Help > Need Help With Sasser-like Virus

Need Help With Sasser-like Virus

Note The date and time displayed in this dialog box will be adjusted to your time zone, if your computer is not set to the Pacific time zone. To paraphrase the great Morpheus, these people are living in a dream world. But read my above statement about my experience with windows and virii. - by ChuckyCheese viruses (5:38pm EST Mon May 03 2004)I recently got a virus when I was attempting to Corné July 18, 2004 11:20 AM Hello, i had the same troubles, i love to spit in my machine and i found lsass.exe en dirote.exe, it was hard to delete it, http://flashcodehacks.com/need-help/need-help-here-msn-virus-log.html

I am downloading the q317636i.exe file thingy. For the most part… I still have to use IE for windows updates. DempseyCengage Learning, 23 mars 2010 - 480 sidor 0 Recensionerhttps://books.google.se/books/about/Introduction_to_Private_Security.html?hl=sv&id=S3rFr5gWKQUCThis uniquely practical introduction to private security emphasizes professionalism and ethics and demonstrates how public law enforcement and private security work in Please kindly inform me the solution of these. https://www.symantec.com/security_response/writeup.jsp?docid=2004-050114-1706-99

So far four variants of Sasser have been seen in the wild. Check the updated article (http://ask-leo.com/archives/000114.html ) for links to Symantec's site where there is more information and removal instructions. Click here to Register a free account now! I have a Dell Demension 2400 series.

If you are using Daylight Saving time, the displayed time will be exactly one hour earlier. I downloaded the fxsasser.exe tool from the symantec site, but it said i didnt have sasser. That's why you want a AV package that looks for many viruses. Trying to address non-technical issues with technical tools is often a frustrating game of the proverbial "square peg in a round hole" for administrators of all kinds.

bye.... There's an outside chance this could be caused by spyware, so check this article: http://ask-leo.com/archives/000131.html . World wide epidemic. http://ask-leo.com/what_are_lsass_lsassexe_and_sasser_and_how_do_i_know_if_im_infected_what_do_i_do_if_i_am.html This is surprisingly close to the process of providing ROI data to managers.

Now the problem is that, when i start computer it will automatically shut down after some time and searched for this is error and it is due to lsass.exe worm problem. This is likely the most important part of learning from an outbreak: presenting your findings to the executive staff, gauging their reaction, and making a case for additional security funds. My son has telephoned me for help apparently he was installing his Bt Broadband and registering on line then found the Sasser virus had downloaded on his Computer his O/s is The virus transmits itself in two parts.

Please help. I run a firewall at home so I never had any problems. IIS 5.0 WebDav vulnerability3. dan September 27, 2004 3:44 AM look at http://www.processlibrary.com/directory/files/lsass/ Ben September 29, 2004 7:25 PM I have a runaway task: lsass.exe and I can't get it to stop.

I don't think I have sasser because I have never had the rebooting problem but was just going to fix it so I don't get it. this contact form Thanks Leo July 28, 2004 7:00 PM Almost impossible to say - it could be many things. I even went as far as to check for the blaster worm, because I know it will start a computer shutdown too. even when the scanner doesn't fix 'em, they almost always include manual "hot to remove" steps for each specific virus.

Virus gets posted to places virus writers share what they discovered.4. Download the FxSasser.exe file from: http://securityresponse.symantec.com/avcenter/FxSasser.exe. I have tried just about all avenues that i know of and have had no results. have a peek here maybe macs get hit less often, sure - but probably because mac users are too busy making love to their machines to think of doing anything to harm them.

The viruses just happens to cause problems that are reported as having happened LSASS.EXE. Would you rather be driving a Firebird that's flashy and easy to steal or flying an F-15 Strike Eagle? - by by design Here and Now (2:56pm EST Mon May 03 Displays the help message. /NOFIXREG Disables the registry repair (We do not recommend using this switch). /SILENT, /S Enables the silent mode. /LOG=[PATH NAME] Creates a log file where [PATH NAME]

Get behind a firewall.

I copied and pasted a comment from a forum I stumbled across today. -------------- Lsass.exe is a normal system file on XP. John Billy June 21, 2004 9:33 PM During the start up of windows (status bar at 100%) and the login screen popping up, I got a message that said my computer USER COMMENTS 64 comment(s) Sasser hitting Windows machines big time. (12:54pm EST Mon May 03 2004)On Friday, we had the first Sasser worm which was rated category 3. Our expert industry analysis and practical solutions help you make better buying decisions and get more from technology.

The workstations just kept rebooting. Thanks Sami Leo July 15, 2004 9:08 AM Are you on a LAN with other machines? This HTTP server is used to deliver the trojan to infected systems.Scans port 5000 (tcp). Check This Out Unlike previous outbreaks, Sasser doesn't even need you to use email or even be at your machine to infect your computer and continue spreading.

As an alternative, you can try some of the alternative on-line virus checkers I mention in my recommendations pages: http://recommend.pugetsoundsoftware.com Good luck! I think you're safe for now, and possibly awhile with Apple dedicating all its extra cycles to iTunes nowadays. - by DudeInUglyHat For those of you (2:05pm EST Mon May 03 Viruses, including network worms, Trojans, and more can provide equally good, and often times better, views of the network in a true production environment -- and there is quite a bit The discussion does not need to be a technical one; many business continuity officers and risk managers will be exceptionally receptive to prevention measures.

If you are running Windows Me/XP, then re-enable System Restore. Is it because it's not worth hacker's time? In the case of a removal of the worm, the program displays the following results: Total number of scanned files Number of deleted files Number of repaired files Number of terminated Thanks Leo June 1, 2004 9:50 AM I just addressed that in a new post: http://ask-leo.com/archives/000154.html Anjum Khan June 1, 2004 12:10 PM hey, I am infected with the virus lsass.exe,