Acting like a Virus (Sasser) but 2 Scan said sys is Clea ???

[Bubey]

2nd Installment of the problem with updated info

Sony Viao / Win XP / Virus scans by AVG and
Symantec's, which both said NO virus.
Did a Spybot and it didn't find anything. Did the
Symantec's removal anyway just
in case. PC starts and can be used for short
time, then it freezes up. It has all the
systems of the W32.Sasser worm as listed on
Symantec's site. Anyone have any other
idea's as to what's causing this or how to fix
it...........Thanks !

 

[David H. Lipman]

From: "Bubey" <[email protected]>

| 2nd Installment of the problem with updated info
|
| Sony Viao / Win XP / Virus scans by AVG and
| Symantec's, which both said NO virus.
| Did a Spybot and it didn't find anything. Did the
| Symantec's removal anyway just
| in case. PC starts and can be used for short
| time, then it freezes up. It has all the
| systems of the W32.Sasser worm as listed on
| Symantec's site. Anyone have any other
| idea's as to what's causing this or how to fix
| it...........Thanks !

There is NOTHING in your post that would indicate an Internet worm attempting to exploit the
buffer overflow condition in the LSASS module via TCP port 445. This was originally
exploited by the Sasser worm but that died off and was replaced by numerous other BOTs which
added that exploit to their repertoire.

 

[Guest]

2nd Installment of the problem with updated info

Sony Viao / Win XP / Virus scans by AVG and
Symantec's, which both said NO virus.
Did a Spybot and it didn't find anything. Did the
Symantec's removal anyway just
in case. PC starts and can be used for short
time, then it freezes up. It has all the
systems of the W32.Sasser worm as listed on
Symantec's site. Anyone have any other
idea's as to what's causing this or how to fix
it...........Thanks !

Hi Bubey,
It could be a hardware/software problem more than an infection.
Perform Clean Boot and see if there is a program causing this and also run
the Processor Explorer and see what running in the background:
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

FileMon download:
http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx

Also look in the Event Viewer for any error messages (X) that can help
narrow down the cause.
Do you have any Third-Party toolbars installed on your system.
HTH.
Let us know.
nass
===
www.nasstec.co.uk