Sasser

[Guest]

Hello,
A client's computer has the Sasser virus and will not boot up. After the XP
professional splash screen, an error box comes up:

"lsass.exe - When trying to update a password this return status indicates
that the value provided as the current password is not correct."

The boot process begins anew and cycles like this forever. Obviously, in
this situation, I cannot stop the shutdown process, nor can I disable System
Restore, as is the recommended first step to removing Sasser. I have the
removal tool from Symantec, I just have to figure out how to get it onto the
machine and run it. The computer will not start in any mode, safe, safe
w/networking, safe with command line...

Any ideas?

Thanx,

Ripper

 

[Jupiter Jones [MVP]]

Ripper;
Start here:
http://www3.telus.net/dandemar/sasser.htm

 

[Guest]

Thank you, but as I said, the machine will not boot past the splash screen. I
cannot get to the start/run command to disable the shutdown process.

Rip

 

[Comp Tech]

Hello;
I believe the "Sasser" problem is not the ongoing problem with your
client's machine. Those symptoms you've described point to a more serious
problem. I would try to do the "4-part" repair (using the recovery console.
Or you might think about doing a complete reinstall.
Again, I really don't think the "Sasser" is causing this problem.
Most Unusual !

 

[Guest]

Thank you, can you expand on the "4 part" repair, and can I reinstall without
losing any data?

Rip

 

[Comp Tech]

RipperT;
Try here:
http://www.microsoft.com/resources/...ows/xp/all/reskit/en-us/prmc_str_bjid.aspLots of useful info