Results 1 to 9 of 9

Thread: Sasser problem

  1. #1
    Member
    Join Date
    Mar 2004
    Posts
    110
    Thanks
    0
    Thanked
    0 times in 0 posts

    Sasser problem

    I have all the window updates, and run Mcafee firewall, and virus scanner permanently. But still, I continue to get the sasser worm, where empty files start appearing, with 4 digit files names (eg 1033), in the windows/system32 folder.

    When I reboot realshed, maxes the processor cycles out,and I have to end process to stop my comp from runnig really slow. I then go into safe mode and delete the emtpy folder in windows/system32, then the problem rectifieis itself.

    Noentheless, even with these empty folders, macafee does not recognise it as a virus : why, and how can I stop it?

  2. #2
    www.5lab.co.uk
    Join Date
    Sep 2003
    Posts
    6,406
    Thanks
    1
    Thanked
    0 times in 0 posts
    get the update from windowsupdate.microsoft.com
    hughlunnon@yahoo.com | I have sigs turned off..

  3. #3
    HEXUS webmaster Steve's Avatar
    Join Date
    Nov 2003
    Posts
    14,276
    Thanks
    292
    Thanked
    837 times in 473 posts
    Um, he said he did that.

    http://www.microsoft.com/security/incident/sasser.asp - try this. There's manual downloads for the updates and removal tools.
    PHP Code:
    $s = new signature();
    $s->sarcasm()->intellect()->font('Courier New')->display(); 

  4. #4
    Administrator Moby-Dick's Avatar
    Join Date
    Jul 2003
    Location
    There's no place like ::1 (IPv6 version)
    Posts
    10,665
    Thanks
    53
    Thanked
    385 times in 314 posts
    thats dont sound like the sasser worm

    try an online virus scan at housecall.trendmicro.com
    my Virtualisation Blog http://jfvi.co.uk Virtualisation Podcast http://vsoup.net

  5. #5
    HEXUS webmaster Steve's Avatar
    Join Date
    Nov 2003
    Posts
    14,276
    Thanks
    292
    Thanked
    837 times in 473 posts
    Actually Moby is right, lol.

    http://www.safer-networking.org

    Give spybot a go too.
    PHP Code:
    $s = new signature();
    $s->sarcasm()->intellect()->font('Courier New')->display(); 

  6. #6
    I eats food da_ging's Avatar
    Join Date
    Jul 2003
    Posts
    2,256
    Thanks
    10
    Thanked
    29 times in 24 posts
    • da_ging's system
      • CPU:
      • E5200 @ 3.75Ghz
      • Memory:
      • 4GB kingston HyperX 8500
      • Storage:
      • 2*WD640gb in Raid 0 +500gb 32mb seagate
      • Graphics card(s):
      • BFG GTX 260 Maxcore OC2
      • PSU:
      • Corsair 650w TX
      • Case:
      • Stacker 831 black
      • Operating System:
      • XP Pro
      • Monitor(s):
      • 23" fujitsu 3230t LCD 1920*1080
      • Internet:
      • 8mb
    lol those folders in the sys 32 folder with 4 digit numbers are supposed to be there!!

  7. #7
    Ex-PC enthusiast
    Join Date
    Sep 2003
    Location
    Dublin, Ireland
    Posts
    1,089
    Thanks
    0
    Thanked
    0 times in 0 posts
    Do the 4 digit file names have like _up at the end of them?
    That is typical of sasser.
    Do an online scan at symantec or at trend micro and that might help
    The Cow by Ogden Nash
    The cow is of the bovine ilk;
    One end is moo, the other, milk.

  8. #8
    Member
    Join Date
    Mar 2004
    Posts
    110
    Thanks
    0
    Thanked
    0 times in 0 posts
    They do have _up yeah, except the one at the moment 1033, doesnt, so I suppose that is normal.

  9. #9
    Comfortably Numb directhex's Avatar
    Join Date
    Jul 2003
    Location
    /dev/urandom
    Posts
    17,074
    Thanks
    228
    Thanked
    1,027 times in 678 posts
    • directhex's system
      • Motherboard:
      • Asus ROG Strix B550-I Gaming
      • CPU:
      • Ryzen 5900x
      • Memory:
      • 64GB G.Skill Trident Z RGB
      • Storage:
      • 2TB Seagate Firecuda 520
      • Graphics card(s):
      • EVGA GeForce RTX 3080 XC3 Ultra
      • PSU:
      • EVGA SuperNOVA 850W G3
      • Case:
      • NZXT H210i
      • Operating System:
      • Ubuntu 20.04, Windows 10
      • Monitor(s):
      • LG 34GN850
      • Internet:
      • FIOS
    1033 is the microsoft language code for english, for what it's worth

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. DVI problem, pc won't start! help needed.
    By snowwolf in forum Graphics Cards
    Replies: 1
    Last Post: 09-04-2010, 04:11 PM
  2. Extigy USB problem
    By Tamster in forum PC Hardware and Components
    Replies: 1
    Last Post: 14-02-2004, 09:26 PM
  3. Wierd Ati driver problem
    By Skii in forum PC Hardware and Components
    Replies: 5
    Last Post: 20-01-2004, 06:59 PM
  4. Help me identify the problem, please.
    By ives in forum PC Hardware and Components
    Replies: 13
    Last Post: 08-12-2003, 12:32 PM
  5. Replies: 4
    Last Post: 19-09-2003, 08:25 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •