Bullguard Antivirus Forum Download A Free Copy Of Bullguard Antivirus Software
Free Antivirus Forum - Learn about antivirus, firewalls and personal security Free Antivirus Forum - Learn about antivirus, firewalls and personal security
 HomeLog InRegisterCommunity CalendarSearch the ForumView The Member ListHelp
HELP, SASSER :S
   
BullGuard Antivirus Forum > Virus > Virus Questions > HELP, SASSER :S  
Forum Quick Jump
 
New Topic Post reply to : HELP, SASSER :S Printable version of : HELP, SASSER :S
[ << Previous Thread | Next Thread >> ]

dabamrak
New Member


Date Joined May 2004
Total Posts : 1
 
   Posted 5-4-2004 6:10 (GMT +1)    Quote: HELP, SASSER :SAlert an admin about: HELP, SASSER :S
My computer reboots much and gives the same problem as MS. and Mcafee tell about a sasser worm. But MS says i am not infected en Mcafee couldn't find any virusses :S, what the hell is wrong, my computer says: lsass.exe has shutdown, and your computer will reboot in 30 secs. :S:S, what is wrong :/, can anyone help me??!?! It drives me crazy hop
              Joost
 
 
ps. sorry for my english, i am not very good at it :)
 
 
 
                THX!
Back to Top
 

Destroyer
Trusted Member


Date Joined Mar 2004
Total Posts : 245
 
   Posted 5-4-2004 7:20 (GMT +1)    Quote: HELP, SASSER :SAlert an admin about: HELP, SASSER :S
http://www.bullguard.com/news/default.aspx?ViewId=536
 
 
Here you go, a link to download the anti-sasser, if it finds nothing, come back and tell me smile
 
BTW, english is a lot better than mine ;-)
Back to Top
 

Dedeyes
New Member


Date Joined May 2004
Total Posts : 12
 
   Posted 5-5-2004 4:28 (GMT +1)    Quote: HELP, SASSER :SAlert an admin about: HELP, SASSER :S
None of the tools work I have been through all of them .
Symantec ,Sophos ,Bullguard ,AVG ,Mcafee ,And microsoft ,they all say I am not infected .
I followed instructions on how to manually remove it from the registry and the adserve .exe is not there .

I have installed the MS security update .

The only way to stop this thing from rebooting and shutting down Lsass is to go online ,if you don't you can expect to be rebooted within 2 minutes and if you disconnect you've got about half an hour before you get shut down .
Makes me wonder why it wants me to be connected because there is no activity unless I open a page .

I noted another guy mentioned it was still ther even after he reformated , I don't see how thats possible but it could be it seems invulnerable so far .
Back to Top
 

Petria
Junior Member


Date Joined Mar 2004
Total Posts : 90
 
   Posted 5-5-2004 11:47 (GMT +1)    Quote: HELP, SASSER :SAlert an admin about: HELP, SASSER :S
Did you run a full scan with Bullguard?

In order to stop the restarting process on the NT systems you should perform the following actions:
Go to Start -> Run and type services.msc then press ENTER
In the 'Services' window find the service: "Remote Procedure Call (RPC)" - and not the "Remote Procedure Call (RPC) Locator" - go to the Recovery tab and choose the following action for all the 3 failures: "Take no Action".

Also please make sure that you have the latest Windows updates from Microsoft:
http://windowsupdate.microsoft.com/

Another suggestion: make sure that you enforce complicated passwords to log into your computer.
Back to Top
 

Destroyer
Trusted Member


Date Joined Mar 2004
Total Posts : 245
 
   Posted 5-5-2004 5:14 (GMT +1)    Quote: HELP, SASSER :SAlert an admin about: HELP, SASSER :S
Is there a file name 'avserve.exe' in the processes tab ?
Back to Top
 

rusty
New Member


Date Joined May 2004
Total Posts : 7
 
   Posted 5-5-2004 9:48 (GMT +1)    Quote: HELP, SASSER :SAlert an admin about: HELP, SASSER :S
my removal tools couldnt find the virus until i disabled my main protection. Once i turned bullguard off....used my removal tool from bullguards website....then it could see the virus and deleted it. For some reason when i had bullguard active the removal tool wouldnt detect the virus....maybe cuz bullguard was blocking it from accessing the files with the virus. Hope this helps.
Back to Top
 
New Topic Post reply to : HELP, SASSER :S Printable version of : HELP, SASSER :S
 
Forum Information
Currently it is Sunday, November 08, 2009 1:13 AM (GMT +1)
There are a total of 72.702 posts in 17.062 threads.
In the last 3 days there were 11 new threads and 46 reply posts. View Active Threads
Who's Online
This forum has 30251 registered members. Please welcome our newest member, decyborg.
27 Guest(s), 0 Registered Member(s) are currently online.  Details
5 Latest Threads
FW in BG 9 Bta 1 (0)07-11-2009 23:59:23 (coherve)
Pop-ups coming thick and fast ... boo-hoo!!! (0)07-11-2009 23:57:10 (arwenevenstar)
What will be new in 9.0? (0)07-11-2009 19:25:13 (Cordialis)
BullGuard Back Up 8.7 : Migration to Win 7 (0)07-11-2009 18:05:57 (coherve)
Craplets on Windows PC could slow down the boot up to 2 minutes (1)07-11-2009 16:40:55 (Dickens)