Re: What is connected to which?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Because he felt like "bragging" and giving himself a free plug?

Honu

"Wesley Vogel" <123WVogel955@xxxxxxxxxxx> wrote in message
news:ujVhlhGUHHA.5016@xxxxxxxxxxxxxxxxxxxxxxx
Why are you replying to a post from Nov 22 2004, 9:23 pm?

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:01EBF8A6-FE61-4EA7-AC34-EE9D7FDBB926@xxxxxxxxxxxxx,
Bill <Bill@xxxxxxxxxxxxxxxxxxxxxxxxx> hunted and pecked:
I run a computer repair out of my home, specializing in AV and spyware.
i
fix many machines that were running symantec. not a knock on the
company,
just my personal experience.

I recommend going to pandasoftware.com and running their free active scan
for a second opinion. Of course, this free scan seems to find many
things, and offers to sell you a full version, but it does remove some
viruses that have concealed themselves from other products.

another thing you might try is go to free.grisoft.com, install AVG Free
edition, update your defs, then boot into safe mode and do a full scan
from there. If it finds something and cleans it, you will need to either
remove it, or remove symantec, as they conflict with one another. AVG
will quarantine a file, then Symantec will quarantine the AVG quarantine,
over and over and over, so decide which to use and remove the other.

Also don't forget that System Restore might be holding the infection, so
you should consider turning off system restore before running your scan
(that's symantec standard advice, not mine, but i have seen this work
personally.

Last bit of advice, I have repaired many computers running a third party
firewall, and have found that sometimes the firewall is broken, and
needed to be removed or repaired before normal operations could be
restored after a cleanup.

"David Candy" wrote:

That's for the first sasser. There are lots of sasser (type it in
symantec's site). Programs like this tend to interfere with AV programs.
I've not ever caught sasser so I don't know it well. I posted that page
(and deleted 50000 images from it) because viruses tend to block AV
companies web sites.

Plus sasser is not the only lsa thingy.

Ensure you are sasser free first.

http://www.sarc.com/search/
This is norton's site. Just type sasser. Norton tends to have the best
descriptions but a lousy search engine (it finds the same pages over and
over again). --
----------------------------------------------------------
http://www.uscricket.com
"kiadau" <kiadau@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2EAA3302-9720-4FA4-B39E-3EACA5B36666@xxxxxxxxxxxxxxxx
Thank you David for all the info. While I updated my live update and
got the latest definitions and ran a full system scan, the results did
not come back as possitive for the sasser worm. I do however know that
there are files on my system which are sasser files. Is it possible
that because I denied access through my firewall it did not trigger the
worm? Why wouldn't the virus scan show that I was infected? Symantec
has been very uncooperative and I am unable to get information from
them as to whether the systemworks version I have is working properly.

I will however, look for those file and delete them as noted below in
your info

K

"David Candy" wrote:

There's lots of varients.


W32.Sasser.Worm
Discovered on: April 30, 2004
Last Updated on: July 27, 2004 11:20:39
AM
Also Known As: W32/Sasser.worm.a
[McAfee], WORM_SASSER.A [Trend], Worm.Win32.Sasser.a [Kaspersky],
W32/Sasser-A [Sophos], Win32.Sasser.A [Computer Associates], Sasser
[F-Secure], W32/Sasser.A.worm [Panda]

Type: Worm
Infection Length: 15,872 bytes



.

Relevant Pages

  • RE: XP rebooting
    ... sasser virus as sasser is more prevalent these days. ... take these steps to update your software, remove the worm, and help ... To avoid further problems, disconnect from the Internet: ... Step 5: Enable a Firewall ...
    (microsoft.public.security.virus)
  • Re: LSA Shell ( Export Version) encountered a problem and needed to close
    ... Your computer is infected with a variant of either the Blaster or the Sasser ... worm. ... You have no firewall. ... Your antivirus is out of date. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: What is connected to which?
    ... I run a computer repair out of my home, ... it, or remove symantec, as they conflict with one another. ... Plus sasser is not the only lsa thingy. ...
    (microsoft.public.windowsxp.newusers)
  • PC schaltet sich automatisch aus
    ... aber laut dem Entfernungstool von Symantec ... kann dieses keinen Sasser - Wurm finden. ... Vielen Dank für eure Hilfe schon einmal im voraus. ...
    (microsoft.public.exchange.misc)
  • lsass 128 rpc probs!!!
    ... I think I have a worm on a computer. ... up that says that Remote Procedure Call has terminated ... I thought it was Sasser, but I have run the Symantec ...
    (microsoft.public.win2000.security)