«

Hello,

Have already had and successfully removed Sasser.A, Sasser.B and Sasser.C.
My virus definitions and firewall updates are bang up to date. However, I'm
still noticing lsass.exe running in the task manager, and my anti-virus
software turned off when I boot up the PC, so I know the bastard is still
there - it's not really affecting system performance in the same way
previous incarnations have.

What can I do?

Grant

"Pistol Pete" <> wrote in message
news:c77n8t$580$...
> Hello,
>
> Have already had and successfully removed Sasser.A, Sasser.B and
Sasser.C.
> My virus definitions and firewall updates are bang up to date.
However, I'm
> still noticing lsass.exe running in the task manager, and my
anti-virus
> software turned off when I boot up the PC, so I know the bastard is
still
> there - it's not really affecting system performance in the same way
> previous incarnations have.
>
> What can I do?
>
> Grant
>

Lsass.exe is also running in my task manager. I don't think this
indicates the Sasser virus. Lsass.exe is a system process.

"Pistol Pete" <> did say:

> Hello,
>
> Have already had and successfully removed Sasser.A, Sasser.B and
> Sasser.C. My virus definitions and firewall updates are bang up to
> date. However, I'm still noticing lsass.exe running in the task
> manager, and my anti-virus software turned off when I boot up the
> PC, so I know the bastard is still there - it's not really
> affecting system performance in the same way previous incarnations
> have.
>
> What can I do?
>
> Grant

Via Google.
http://www.liutilities.com/products/...library/lsass/

Boomer wrote:

> "Pistol Pete" <> did say:
>
>
>>Hello,
>>
>>Have already had and successfully removed Sasser.A, Sasser.B and
>>Sasser.C. My virus definitions and firewall updates are bang up to
>>date. However, I'm still noticing lsass.exe running in the task
>>manager, and my anti-virus software turned off when I boot up the
>>PC, so I know the bastard is still there - it's not really
>>affecting system performance in the same way previous incarnations
>>have.
>>
>>What can I do?
>>
>>Grant
>
>
> Via Google.
> http://www.liutilities.com/products/...library/lsass/


Yep, deleting that will surely make the OP's computer more
secure . Who needs users?

I was slightly off, the Sasser virus exploits a security weakness in
lsass.exe. But this is regardless because it is still switching off my
Antivirus software - so it's still lurking somewhere! Argh!

"hushia" <> wrote in message
news:c77o7l$dei$...
> "Pistol Pete" <> wrote in message
> news:c77n8t$580$...
> > Hello,
> >
> > Have already had and successfully removed Sasser.A, Sasser.B and
> Sasser.C.
> > My virus definitions and firewall updates are bang up to date.
> However, I'm
> > still noticing lsass.exe running in the task manager, and my
> anti-virus
> > software turned off when I boot up the PC, so I know the bastard is
> still
> > there - it's not really affecting system performance in the same way
> > previous incarnations have.
> >
> > What can I do?
> >
> > Grant
> >
>
> Lsass.exe is also running in my task manager. I don't think this
> indicates the Sasser virus. Lsass.exe is a system process.
>
>

=?UTF-8?B?UGFsaW5kcuKYu21l?= <> did say:

> Boomer wrote:
>
>> "Pistol Pete" <> did say:
>>
>>
>>>Hello,
>>>
>>>Have already had and successfully removed Sasser.A, Sasser.B and
>>>Sasser.C. My virus definitions and firewall updates are bang up
>>>to date. However, I'm still noticing lsass.exe running in the
>>>task manager, and my anti-virus software turned off when I boot
>>>up the PC, so I know the bastard is still there - it's not really
>>>affecting system performance in the same way previous
>>>incarnations have.
>>>
>>>What can I do?
>>>
>>>Grant
>>
>>
>> Via Google.
>> http://www.liutilities.com/products/...esslibrary/lsa
>> ss/
>
>
> Yep, deleting that will surely make the OP's computer more
> secure . Who needs users?

At last.. the easy way to make sure Windows is exempt from viruses.

Boomer wrote:

> =?UTF-8?B?UGFsaW5kcuKYu21l?= <> did say:
>
>
>>Boomer wrote:
>>
>>
>>>"Pistol Pete" <> did say:
>>>
>>>
>>>
>>>>Hello,
>>>>
>>>>Have already had and successfully removed Sasser.A, Sasser.B and
>>>>Sasser.C. My virus definitions and firewall updates are bang up
>>>>to date. However, I'm still noticing lsass.exe running in the
>>>>task manager, and my anti-virus software turned off when I boot
>>>>up the PC, so I know the bastard is still there - it's not really
>>>>affecting system performance in the same way previous
>>>>incarnations have.
>>>>
>>>>What can I do?
>>>>
>>>>Grant
>>>
>>>
>>>Via Google.
>>>http://www.liutilities.com/products/...esslibrary/lsa
>>>ss/
>>
>>
>>Yep, deleting that will surely make the OP's computer more
>>secure . Who needs users?
>
>
> At last.. the easy way to make sure Windows is exempt from viruses.
>

I think at least one SciFi film has had a plot of the
computer operating system identifying the users as a virus
and trying to stop them replicating. Not that you need
computers to do that when you have 3 kids under 4...

=?UTF-8?B?UGFsaW5kcuKYu21l?= <> did say:

> Boomer wrote:
>
>> =?UTF-8?B?UGFsaW5kcuKYu21l?= <> did say:
>>
>>
>>>Boomer wrote:
>>>
>>>
>>>>"Pistol Pete" <> did say:
>>>>
>>>>
>>>>
>>>>>Hello,
>>>>>
>>>>>Have already had and successfully removed Sasser.A, Sasser.B and
>>>>>Sasser.C. My virus definitions and firewall updates are bang up
>>>>>to date. However, I'm still noticing lsass.exe running in the
>>>>>task manager, and my anti-virus software turned off when I boot
>>>>>up the PC, so I know the bastard is still there - it's not really
>>>>>affecting system performance in the same way previous
>>>>>incarnations have.
>>>>>
>>>>>What can I do?
>>>>>
>>>>>Grant
>>>>
>>>>
>>>>Via Google.
>>>>http://www.liutilities.com/products/...esslibrary/lsa
>>>>ss/
>>>
>>>
>>>Yep, deleting that will surely make the OP's computer more
>>>secure . Who needs users?
>>
>>
>> At last.. the easy way to make sure Windows is exempt from viruses.
>>
>
> I think at least one SciFi film has had a plot of the
> computer operating system identifying the users as a virus
> and trying to stop them replicating.

Seriously?

> Not that you need
> computers to do that when you have 3 kids under 4...

There's other means for 'that' replication problem. ;o)

Hi,

With newer Sasser Worm varients appearing I also recommend you use a
Trojan Scanning
tool to make sure nothing elase has been placed on your PC.

Why?

The Sasser Worm did not have this as part of its code, HOWEVER the
newer varients could
be written to do more than the original worm!

A FREE online Trojan scanner is here:

http://www.trojanscan.com

More on the Sasser worm at:

http://www.sasser-worm.com

Kind Regards

Marc Liron
Microsoft MVP
http://www.updatexp.com
----------------------------
Get Your FREE XP Newsletter!
----------------------------


"Pistol Pete" <> wrote in message news:<c77r43$gp8$>...
> I was slightly off, the Sasser virus exploits a security weakness in
> lsass.exe. But this is regardless because it is still switching off my
> Antivirus software - so it's still lurking somewhere! Argh!
>
> "hushia" <> wrote in message
> news:c77o7l$dei$...
> > "Pistol Pete" <> wrote in message
> > news:c77n8t$580$...
> > > Hello,
> > >
> > > Have already had and successfully removed Sasser.A, Sasser.B and
> Sasser.C.
> > > My virus definitions and firewall updates are bang up to date.
> However, I'm
> > > still noticing lsass.exe running in the task manager, and my
> anti-virus
> > > software turned off when I boot up the PC, so I know the bastard is
> still
> > > there - it's not really affecting system performance in the same way
> > > previous incarnations have.
> > >
> > > What can I do?
> > >
> > > Grant
> > >
> >
> > Lsass.exe is also running in my task manager. I don't think this
> > indicates the Sasser virus. Lsass.exe is a system process.
> >
> >

Thanks your webpage was helpful.

Although my battle against Sasser seems far from over. Every single time i
boot my PC my antivirus software is turned off - so I know Sasser a, b, c or
d is in there somewhere. A recent scan found 6 examples of D.

I find this puzzling. Even though I have a perfectly up-to-date firewall and
anti-virus software, I'm still constantly infected and getting infected.

The latest is Sasser.B re-infesting itself! How's that possible with
up-to-date definitions! I even downloaded the Microsoft fix recommended on
your web site but to no avail.



"Marc Liron MVP" <> wrote in message
news: om...
> Hi,
>
> With newer Sasser Worm varients appearing I also recommend you use a
> Trojan Scanning
> tool to make sure nothing elase has been placed on your PC.
>
> Why?
>
> The Sasser Worm did not have this as part of its code, HOWEVER the
> newer varients could
> be written to do more than the original worm!
>
> A FREE online Trojan scanner is here:
>
> http://www.trojanscan.com
>
> More on the Sasser worm at:
>
> http://www.sasser-worm.com
>
> Kind Regards
>
> Marc Liron
> Microsoft MVP
> http://www.updatexp.com
> ----------------------------
> Get Your FREE XP Newsletter!
> ----------------------------
>
>
> "Pistol Pete" <> wrote in message
news:<c77r43$gp8$>...
> > I was slightly off, the Sasser virus exploits a security weakness in
> > lsass.exe. But this is regardless because it is still switching off my
> > Antivirus software - so it's still lurking somewhere! Argh!
> >
> > "hushia" <> wrote in message
> > news:c77o7l$dei$...
> > > "Pistol Pete" <> wrote in message
> > > news:c77n8t$580$...
> > > > Hello,
> > > >
> > > > Have already had and successfully removed Sasser.A, Sasser.B and
> > Sasser.C.
> > > > My virus definitions and firewall updates are bang up to date.
> > However, I'm
> > > > still noticing lsass.exe running in the task manager, and my
> > anti-virus
> > > > software turned off when I boot up the PC, so I know the bastard is
> > still
> > > > there - it's not really affecting system performance in the same way
> > > > previous incarnations have.
> > > >
> > > > What can I do?
> > > >
> > > > Grant
> > > >
> > >
> > > Lsass.exe is also running in my task manager. I don't think this
> > > indicates the Sasser virus. Lsass.exe is a system process.
> > >
> > >