Not Sasser?

[Ashley]

I kept getting the LSA Shell error so I downloaded all
the critical updates and I went to the symantec site and
microsoft to run their removal tool, but they both say my
computer hasnt been infected, but i keep getting the
error message. what do i do now?

 

[Haus]

Hello
This is a virus, you will have to update your virus definitions and do a
scan, here is a free scan
http://us.mcafee.com/root/mfs/default.asp?cid=9913

The thing most people do not know is that after they buy a computer with
virus protection installed they have to go in and register and download the
updates and continue to update it or set it to auto update then after a
period of time the subscription will run out usually in 90-180 days at that
time they will have to purchase new protection either online or from a
retail store and at that time they will be able to update for a period of
365 days (1 year).


--
Hope This Helps
Haus
Not a MS-MVP
Not a MVP
Not nothing, just a good ole boy.

 

[AnnonUser]

I kept getting the LSA Shell error so I downloaded all
the critical updates and I went to the symantec site and
microsoft to run their removal tool, but they both say my
computer hasnt been infected, but i keep getting the
error message. what do i do now?

Try this.
http://vil.nai.com/vil/content/v_125007.htm
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SASSER.B&VSect=T
Details on the patch needed to prevent it:

http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

Also, you need a good firewall like Zone Alarm or the built in XP firewall
ZoneAlarm is available free at:
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp

 

[AnnonUser]

I kept getting the LSA Shell error so I downloaded all
the critical updates and I went to the symantec site and
microsoft to run their removal tool, but they both say my
computer hasnt been infected, but i keep getting the
error message. what do i do now?

McAfee updated today. Try Stinger at their site.

 

[Alan]

Haus,

Actually, I've found that at least with McAfee, a person can go to its site
every week and download the latest virus definitions manually for as long as
they want.

Alan

 

[Marc Liron - MVP]

If this has only just started in the last few days it may
be the new sasser worm, or one of the variants.

This page has more information on this worm and how to
patch your system

http://www.updatexp.com/sasser-worm.html

Kind Regards

Marc Liron
Microsoft MVP
http://www.updatexp.com

 

[NetNut]

Hi Ashley,
I just spent 4 hours updating a computer, and removing the Sasser virus,
from a computer, that Norton's removal tool said "Is not infected with the
Sasser Virus".
Download Window sec update (835732) and install it first.
Pick for your operating system from this site.
http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx
Then Update your Anti-Virus software's "Virus Definitions"
If your Anti-Virus Software is out of date, it will not help, because it
will not recognize your mutated version of the virus.
If live updates fail, you can try to download and install virus
definitions manually for most A.V. software.
Next YOU MUST DISABLE System Restore.
(See how to here)
http://support.microsoft.com/default.aspx?scid=kb;en-us;264887
Reboot in Safe Mode (press F8 as boot-up begins)
Run Virus Scan (in safe mode)
Pray no major damage was done.
Reboot and run complete A.V. software updates and Windows Critical
Updates.

Good luck, The NetNut

 

[NetNut]

Oh yeah, Then re-enable system restore.

Hi Ashley,
I just spent 4 hours updating a computer, and removing the Sasser virus,
from a computer, that Norton's removal tool said "Is not infected with the
Sasser Virus".
Download Window sec update (835732) and install it first.
Pick for your operating system from this site.
http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx
Then Update your Anti-Virus software's "Virus Definitions"
If your Anti-Virus Software is out of date, it will not help, because it
will not recognize your mutated version of the virus.
If live updates fail, you can try to download and install virus
definitions manually for most A.V. software.
Next YOU MUST DISABLE System Restore.
(See how to here)
http://support.microsoft.com/default.aspx?scid=kb;en-us;264887
Reboot in Safe Mode (press F8 as boot-up begins)
Run Virus Scan (in safe mode)
Pray no major damage was done.
Reboot and run complete A.V. software updates and Windows Critical
Updates.

Good luck, The NetNut