Re: Blaster Virus

From: Barry (someone_at_somewhere.com)
Date: 06/03/05 

Date: Fri, 3 Jun 2005 00:35:39 -0700

Hi

      The virus has suddenly disappeared, i have no clue why, i downloaded
s-t-i-n-g-e-r.exe but when i scanned with it i found nothing , can this
happen ??, i am a little confused, is the virus activated through some date
or some other trigger.
      Can someone tell me how i could have got this virus, i am using
Windows 2003 Server

TIA
Barry

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:#BqGYIrZFHA.1456@TK2MSFTNGP15.phx.gbl...
> From: "Barry" <someone@somewhere.com>
>
> | Hi David
> | Sorry i did not mention my OS, its Windows 2003 Server
> | After i logon to the Internet, after a few minutes i see the
windows
> | , System shutting down in xx Minutes
> | Sometime ago when i wen back to the system without logging on to
the
> | Internet, The RAM or whatever had reduced drastically, whats wrong
> |
> | Thanks for you advice so far
> |
> | TIA
> |
> | Barry
>
> Barry:
>
> You did mention that it is Win2003 Server ;-)
>
> But you still haven't provided any substantiatibg facts. We need the
EXACT "NT SHUTDOWN"
> message.
>
> For example see the attached associated with the LASSAS vulnerability and
the Sasser worm.
> The Lovsan/Blaster is similar except it specifically mentions RPC in the
shutdown message.
>
> However, you will be glas to know that Stinger targets both the Sasser and
Lovsan/Blaster
> worms. But to protect the server, one must know EXACTLY what the problem
is to mitigate the
> vulnerability that is being exploited (assuming that's the case).
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Relevant Pages

  • Re: Isass.exe=sasser?
    ... If a computer is infected with the "Sasser Worm", ... Windows XP - Shell/User ... Windows Local Security Authority Server Process handles Windows ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Source Code att Dave
    ... Windows for Workgroups 3.11 using Wolverine. ... TIA ... appear to be connected directly to a server and often have almost instantaneous posting of my ...
    (microsoft.public.security)
  • Windows Update causes svchost.exe 100% CPU
    ... >I have a Windows SBS 2003 Server and when it reaches ... I was able to install some updates one ... windows components of the add/ remove prog area as well as ... all up to date with the sasser worm going around. ...
    (microsoft.public.windowsupdate)
  • Re: Win98 clients cant change password
    ... Mike ... > Windows 2000 server CD. ... >> TIA ...
    (microsoft.public.win2000.security)
  • RADIUS Client?
    ... Does Windows have one built in, I know they have the server side. ... TIA ...
    (microsoft.public.dotnet.security)