Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 6 of 6
  1. #1
    Regular Coder
    Join Date
    Nov 2002
    Location
    Carmel California
    Posts
    471
    Thanks
    0
    Thanked 1 Time in 1 Post

    sasser virus like symptoms

    Hi, I happen to come by a computer that puzzled me in what was happening. The computer was acting like as if it was infected by the sasser worm before the patches came out (of course the machine was not infected by the sasser worm), where the computer will force it self to reset in 60 seconds randomly soon after the computer is on. This was even happening in safe mode when networking was enabled. I did some virus scans and after being clean the issue was still present. This machine was running windows xp home and lsass would be in the message for the reset. I wonder what is causing this issue and how I can fix it. Thanks for any help.
    Kris Hubby
    kwhubby site

  • #2
    Senior Coder JamieR's Avatar
    Join Date
    Oct 2004
    Location
    United Kingdom
    Posts
    3,161
    Thanks
    0
    Thanked 5 Times in 5 Posts
    Well You've patched it yeah?

    It could be that LSASS is being somehow exploited by something else - Have you installed Service Pack 2? It could be that the LSASS.exe or your whole Operating System is damaged/corrupt somehow and it would be better to reinstall the whole lot

    What Virus Scanner are you using?

  • #3
    Supreme Master coder! _Aerospace_Eng_'s Avatar
    Join Date
    Dec 2004
    Location
    In a place far, far away...
    Posts
    19,291
    Thanks
    2
    Thanked 1,043 Times in 1,019 Posts
    If you don't want to update to SP2, here is a link where you will be able to download the patch. Symantec has good virus removal instructions if you would like to remove it manually. It advises that you should install the patch before starting the manual removal process.

  • #4
    Senior Coder JamieR's Avatar
    Join Date
    Oct 2004
    Location
    United Kingdom
    Posts
    3,161
    Thanks
    0
    Thanked 5 Times in 5 Posts
    Also get yourself a decent firewall

  • #5
    Regular Coder
    Join Date
    Nov 2002
    Location
    Carmel California
    Posts
    471
    Thanks
    0
    Thanked 1 Time in 1 Post
    Hey thanks guys, anyways I just decided to reformat the computer and install sp2, It had more problems then just this, so I figured it would take less time just to reinstall considering there wasn't much on there that needed backup. The computer was running nortan AV 2003 with latest definitions. It turns out the person who has this computer was not doing any windows updates (still at xp sp 1 level) and had no firewall. With 6 different worms appearing in nortan 2003 (interestingly NOT sasser) plus a whole lot of spyware all over the place, even after removing them in safe mode and fiddling around in knoppix Im not surprised if the OS is damaged or something is still lurking around.
    Kris Hubby
    kwhubby site

  • #6
    Senior Coder JamieR's Avatar
    Join Date
    Oct 2004
    Location
    United Kingdom
    Posts
    3,161
    Thanks
    0
    Thanked 5 Times in 5 Posts
    Ok

    Whenever I get given a computer or purchase a second hand one I reformat the disk and reinstall the OS to make a fresh start


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •