Windows XP home edition

From: Charles Smith (squareknot6_at_yahoo.com)
Date: 05/14/04


Date: Fri, 14 May 2004 11:28:53 -0700

No I didn't realize that XP had a firewall, I do now
thanks. I had cleared avserve out of the computer and was
getting the patches from MS when I was reinfected with
Sasser and at a very bad time just when the MS downlaod
had completed and the program was in the midst of
installing it. Sasser shut down the system and rebooted to
nothing, I got a black blank screen and nothing more. I
think the little B$st$rd should be brought to the U.S. so
we could hang him in the Town Squares around the U>S> as a
Pinota' for all to strike at least once. Thanks for your
help will try to follow your suggestions Sadie & Kirtal

>-----Original Message-----
>Was the XP firewall enabled when you tried to update your
>buddies patches?Or,was your buddy running a third party
>firewall?Just a tip you might like to pass on for future
>reference.
>Can you access safe mode via the BIOS? I am not 100%
>certain what is going on here,I am only aware that many
>people are reporting this type of issue.
>
>This is highly experimental,since I am uncertain what is
>causing the constant resets being reported by so many
>people.Virus activity is one possibility-but a multitude
>of other things such as soundcard problems/CPU
>overheating can cause
>resets.Bear in mind,this is written purely from a sense
>of enabling a P.C to remain online long enough to
>download critical patches.Let me know if it works or
>not.My reasoning being,Sasser causes a buffer
>overrun,flooding lsass.This will be recognised a system
>failure,and if set to reboot automatically in the event
>of system failure,XP will do so.)
>
>If your computer resets before accessing Windows XP,refer
>to your BIOS manual to determine how to boot into safe
>mode via the BIOS.(e.g.I tap F5,but your computer may be
>different.)This may prove impossible-report back,so a
>clearer picture of events can be garnered from your
>responses.
>
>To prevent resets interupting the downloading of patches
>Turn off Automatic Reboot, if you haven't already. Of
>course, you can only do this if you can get into Safe
>Mode and logged in as Administrator:
>
>1) Click on "Start", right-click on "My Computer",
>choose "Properties"
>2) Click on the "Advanced" tab.
>3) Under "Startup and Recovery" click on "Settings"
>4) Under "System Failure" uncheck "Automatically Restart".
>5) Click "Apply" then "Ok" then reboot your system.( If
>you get an error message, and your system doesn't reboot,
>report the precise error message.)
>If it successfully reboots:
>Still in safe mode,run a full virus scan of your entire
>platform.Decent A.V programmes will allow you to do this.
>At the very least,run Stinger,which has been updated to
>detect all sasser variants.Download and save it straight
>to a floppy:
>
>Stinger:
>http://vil.nai.com/vil/stinger/
>
>Bear in mind the possibility that many agobots/worms also
>exploited the lsass vulnerability.If your buddy got
>Sasser,he probably let in a few nasties,too.Plus the
>fact,the lsass patch is not the only patch against remote
>code execution your pal might've missed.
>
>Beyond that,keep exchanging feedback via this or the
>virus forum.Even if you elect to reformat,please report
>whether you were able to accomplish this.By reformat,I
>mean a true,reboot from CD,run set-up style reformat.
>It'd really help us all build a clear picture of what is
>really going on.
>
>Sadie
>
>>-----Original Message-----
>>A buddy of mine bought a new Dell Inspirion 5100 with
>the
>>XP OS and didn't hear about the update process being
>>important. Guess what he got Sasser. I removed it the
>>first time and was in the process of updating his OS
>when
>>it struck again right in the middle of the installing
>the
>>securtiy patches. Now the operating system will not come
>>up in either regular or safe modes. Am I screwed and
>will
>>have to reinstall the system and loose all his STUFF as
>he
>>calls it?
>>.
>>
>.
>



Relevant Pages

  • Windows XP home edition
    ... buddies patches?Or,was your buddy running a third party ... Can you access safe mode via the BIOS? ... Turn off Automatic Reboot, if you haven't already. ... virus forum.Even if you elect to reformat,please report ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Patch your damn computers already!!!
    ... >libssl, etc.), as well as all kernel patches. ... >requires console access; a remote reboot doesn't. ... > Bill> time is critical for the clients. ... and the client had about 1200 domains spread over 2 systems. ...
    (comp.unix.bsd.freebsd.misc)
  • Re: WSUS/Reboot
    ... > service and bouncing the entire box. ... Ever have a box reboot with an error ... > notice is immediate application of patches that don't need reboots. ... > systems is to drop the service in question, apply patches and restart ...
    (Focus-Microsoft)
  • Re: Sun Solaris login bug patches out
    ... Sometimes the patches are not needed, ... don't require a reboot after installation. ... if you have to wait for the regular scheduled time to install ... an important patch, that may make matters worse also -- being a slave to ...
    (Focus-SUN)
  • Sasser question
    ... If your computer resets before accessing Windows XP,refer ... to your BIOS manual to determine how to boot into safe ... Turn off Automatic Reboot, if you haven't already. ... >the installation CD). ...
    (microsoft.public.security)