Re: sasser or new virus?

From: Ed H (w.whatkey_at_comcast.net)
Date: 08/25/04 

Date: Wed, 25 Aug 2004 08:10:33 -0400

I've been with CA E-Trust since the free InoculateIT days. I've never been
infected and have had viruses detected and removed that infected others, I
love it. 

-- 
Ed H
Dell Dimension 4550, WinXP Professional SP2
60 Gig. HD, 512 DDR, Pentium IV 2.40 GHz.
"Nick Goetz" <ngoetz@niagara.com> wrote in message 
news:Xns95504EFAEC091ng1300@207.46.248.16...
> "NoNoBadDog!" <mypants_bjsledgeATpixi.com> wrote in
> news:OsCSzSniEHA.356@tk2msftngp13.phx.gbl:
>
>> Teresa;
>>
>>    There are new variants of the Sasser worm introduced all the
>>    time.  CA
>> Eztrust is not well known for staying up to date.  The patch
>> form Windows update disabled the variant that you have, but your
>> computer is still infected with it.  I would recommend dumping
>> EZTrust and getting Norton Antivirus.  It is generall the first
>> of all the popular AV programs to release patches and updates as
>> new variants of known worms.
>>
>> Please follow Kelly's very good advice and run the removals
>> tool.
>>
>> Your AV protection is only as good as the last update it has
>> had.  Perhaps you should search for a new AV program.
>>
>> Bobby
>>
>> "Teresa" <Teresa@discussions.microsoft.com> wrote in message
>> news:19A57364-8138-49F0-B924-25B6D97E8453@microsoft.com...
>>> I'm working on an XP Home computer. I was getting the typical
>>> sasser error (lsass) followed by the 60 second reboot box. I
>>> run CA Etrust 7.1 with the newest signature and I ran a sasser
>>> removal tool. Both scans found nothing.
>>> The problem stopped when I finally got all my MS patches
>>> installed. Why didn't my scans detect Sasser? Was this some
>>> kind of Trojan or malware? I intend to run a spyware scanner as
>>> soon as I get back to work but don't expect to find anything
>>> since this is a new install of XP. Do you still have
>>> to remove Sasser after installing the MS patches? I haven't
>>> found any documentation on that question yet. Thanks in
>>> advance.
>>
>>
>
> If you check Symantec's web site, you'll see that a new
> "Liveupdate"is normally released once a week.
>
> If you follow any newsgroups you'll find that Norton Antivirus (as
> do some others) have a number of problems, including some with XP
> SP2.
>
> Etrust (vet) has updates just about every day (excluding weekends).
> It has a much smaller footprint than Norton, is "fast", uses little
> resources (by comparison).  I've been using it for years and
> recommend it to customers.
>
> Norton is as good as any of the top scanners but is a "pain" to fix
> when it falls over (and it seems to fall over too often for my
> taste), and can "bog" down a slow, older system.  It does an
> excellent job of detecting infections... but... so do a lot of
> others.
>
> Another good choice: PC Cillin - generally rated better than
> Norton.
>
> I'd stick with ETrust.
>
> Nick Goetz

Relevant Pages

  • Help / Patch 835732 is killing my Win2k machine
    ... infected with Sasser. ... fix page says to download and install 835732, ... and now the login takes 10 minutes to arrive ... infections by Sasser, ...
    (microsoft.public.win2000.security)
  • Re: sasser variant??
    ... There are a number of recent viruses which attempt to block access to both ... Microsoft and most of the anti-virus vendors are providing tools for the ... automatic removal of some of the Sasser variants. ... multiple infections on machines with Sasser. ...
    (microsoft.public.security.virus)
  • Re: Programmes keep shutting down (Norton)
    ... I've been impressed with Panda, which has found infections other well-known ... one good way to clean a machine is to extract ... >>> with my AV software and Firewall so I upgraded to Norton ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Help / Patch 835732 is killing my Win2k machine
    ... and document tcp/ip and mail account settings if you do ... > Daughter's computer is on W2K, infected with Sasser. ... > infections by Sasser, ...
    (microsoft.public.win2000.security)
  • Re: Applications shut down
    ... Download stinger from http://vil.nai.com/vil/stinger/ and place ... hitting F8 just as Windows begins to load. ... your Norton software, and immediately update it. ... > Had an issue with the Sasser worm. ...
    (microsoft.public.windowsxp.general)