Re: Sasser related Problem?

From: Bill Sanderson (Bill_Sanderson_at_msn.com.plugh.org)
Date: 05/04/04


Date: Tue, 4 May 2004 11:25:15 -0400

This doesn't sound like Sasser.

Are your machines behind a Nat/router, or firewall of some sort?

Since it works fine in Safe mode, the likelyhood is that some sort of driver
or software which starts in normal mode, is interfering.

You can use MSCONFIG to troubleshoot this:

First do Start, Run, MSCONFIG <enter> and set the machine to start in
diagnostic mode.

If that works fine, run MSCONFIG again and go back to normal startup, but
uncheck as many extraneous things in the STARTUP tab as you can, and see
whether the problem goes away. Basically---go through the startup items,
perhaps removing all and then re-adding them in small groups, until the
symptom comes back--perhaps one of the startup items is hanging.

You might also look at the system event logs: Right-click My Computer,
choose manage, expand event logs, and look at the three logs--particularly
System, and perhaps application, around each boot time--to see if there are
any clues there about what might be hanging.

And, of course, make sure all your machines are patched to date with
critical items from WindowsUpdate, have current antivirus protection, and
are behind a firewall or nat/router:

www.microsoft.com/protect

"White Chocolate" <josh@seenontv.com> wrote in message
news:82a101c431df$4caf2030$a001280a@phx.gbl...
> My boss is conviced that a computer has the sasser worm,
> yet none of the other computers are infected. However the
> computer in question the keyboard doesnot respond at the
> welcome screen in xp, i can boot in safe mode so i know
> that there not a problem with the keyboard. Is this the
> side affect of Sasser, i thought sasser does not damage
> the computer, just shut it down.
>
> Any Ideas?



Relevant Pages

  • Re: Sasser - unable to login - shutdown in 5 seconds
    ... It has obviously been infected with the Sasser ... >> worm but I can not keep the system running long enough ... >> to install any patches or clean anything. ... The same thing happens in safe mode ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Keep losing browser capabilities
    ... His had two instances of Sasser and two or three of ... I'm in Safe Mode at the moment and it just keeps ... Then the eTrust firewall flagged ... hosts files. ...
    (microsoft.public.windowsxp.general)
  • Re: Flashing Footnotes in Word Document (Still Flashing)
    ... What happens when you start Word in Safe Mode? ... I have the same problem on both machines (the ScreenTip that used to ... >> add-in causing this. ...
    (microsoft.public.word.application.errors)
  • Re: End task on (sample.exe)
    ... destroy,CWShredder.Run all of them in safe mode. ... I have 2 XP Pro systems that have trouble shutting down. ... machines and I checked the virus protection on both and they are up ... date and I ran the stinger on both and it deleted a couple of Trojans ...
    (microsoft.public.windowsxp.general)
  • Re: CD/DVD player not showing
    ... I don't see it being an MS update issue, all of my machines are fully up to date and have no drive issues. ... Did you uninstall ANY/ALL DVD/CD ROM drives in Safe Mode> Device Manager? ... I realize you mentioned previously that it wouldn't boot to Safe Mode yet I have to ask. ...
    (microsoft.public.windowsxp.general)