LsaSrv Error message maybe Sasser

From: alex (anonymous_at_discussions.microsoft.com)
Date: 05/10/04 

Date: Mon, 10 May 2004 04:24:13 -0700

Hi there

I am also having the same problem with one of our
servers. However, this has been going on since end of
April, therefore cannot be the Sasser worm (as this
appeared after May 1).
Still no closer to a resolution this end tho. You ?

Alex

>-----Original Message-----
>hello,
>
>One of our machine got some errors with Event ID 5000 and
>Event source LsaSrv. Microsoft describes this error in
>KB328948. I am not sure if the error comes directly from
>Lsass.exe or from Maybe Sasser worm.
>A test with the Microsoft tool shows me, that the machine
>is not infected with sasser.
>
>I think its an attack from sasser but i am not sure.
>Does anyone know, which error messages Sasser produces or
>how i can identify it?
>
>Thanks in advance
>.
>

Relevant Pages

  • RE: System Shutdown Message
    ... >This is an indication on the sasser worm. ... >1) What You Should Know About the Sasser Worm and Its ... >To avoid further problems, disconnect from the Internet: ... >manufacture stand-alone software firewalls. ...
    (microsoft.public.win2000.applications)
  • Re: Sasser virus
    ... Subject: Sasser virus ... | this is typical of the effect of the sasser worm. ... If you don't patch the PC and not use a FireWall then you will just be ... FireWall to allow it to download the needed AV vendor related files. ...
    (microsoft.public.security.virus)
  • What you need to know about the Sasser worm
    ... The Sasser worm - what you need to know ... The Sasser worms exploits a vulnerability in Microsoft operating systems Windows XP and Windows 2000, ...
    (alt.computer.security)
  • Re: LSASS.exe
    ... Trend Micro free online scan and have come up with nothing.No Sasser. ... ran the Symantec's removal tool and still nothing. ... > What You should Know about the Sasser Worm and its Variants ... > McAfee AVert Stinger Virus Removal Tool ...
    (microsoft.public.security.virus)
  • sasser
    ... The Sasser worm - what you need to know ... The Sasser worms exploits a vulnerability in Microsoft operating systems Windows XP and Windows 2000, ...
    (alt.computer.security)