sasser/blaster clone?

4 Apr 2005 7:37 AM

Szymon "Szymszy" Seliga

Any time I insert my pendrive in the USB slot, while the device is being
installed, sasser/blaster like window pops out exept for one line which
states "The sysetm process c:\\winnt\system32\services.exe...(and so on)"
And ofcourse the 1 minute countdown till shutdown begins. And this is the
only moment this happens.
I've got sp4.(win2k), norton firewall, anti-virus. However "something is
preventing me from downloading new "critical" updates for windows.
"update.exe generated errors and..."
Searched the web and news groups and found nothing helpful. Any thougths?

--
Thanks,
Szymon

4 Apr 2005 9:40 AM

Crouchie1998

Czesc Szymon

Check that its not your firewall blocking access to Windows update by
disabling it & trying

Also check to see if you can download ActiveX controls because Windows
Update uses an Active X engine

Check Downloaded Program Files in WINNT

Download & install SpyBot S & D:

http://www.spybot.info/en/download/index.html

To jest sto procent gratis

Update the above program with everything

Scan your computer

Check Windows Update again.

Are you on TPSA Zero bitów/sekond (nie uldonlny Internetu)?

----------------------------------------

Czy masz gg? Pisac twoja numer tutaj, dobrze? Ale muszemy tylko pisac po
angielskiego

Na razie

4 Apr 2005 8:17 PM

Szymon "Szymszy" Seliga

Show quote Hide quote

> Check that its not your firewall blocking access to Windows update by
> disabling it & trying
>
> Also check to see if you can download ActiveX controls because Windows
> Update uses an Active X engine
>
> Check Downloaded Program Files in WINNT
>
> Download & install SpyBot S & D:
>
> http://www.spybot.info/en/download/index.html
>
> To jest sto procent gratis
>
> Update the above program with everything
>
> Scan your computer
>
> Check Windows Update again.

Spybot found nothing. Windows Update still doesn't work. Earlier though I
managed to download some insignificat updates.
I have already made a full system scan both in normal and safe mode. Also
tried various blasster and etc tools.
No effect...

> Are you on TPSA Zero bitów/sekond (nie uldonlny Internetu)?
nope, Aster :)

> ----------------------------------------
>
> Czy masz gg? Pisac twoja numer tutaj, dobrze? Ale muszemy tylko pisac po
> angielskiego

1961717

best regards
Simon

4 Apr 2005 1:17 PM

Ramki

Try this link
http://www.microsoft.com/security/incident/sasser.mspx

and please read item no.3 of the above

Ramki

4 Apr 2005 3:57 PM

David H. Lipman

Show quote Hide quote

From: "Szymon "Szymszy" Seliga" <stsi***@poszta.onet.pl>

| Any time I insert my pendrive in the USB slot, while the device is being
| installed, sasser/blaster like window pops out exept for one line which
| states "The sysetm process c:\\winnt\system32\services.exe...(and so on)"
| And ofcourse the 1 minute countdown till shutdown begins. And this is the
| only moment this happens.
| I've got sp4.(win2k), norton firewall, anti-virus. However "something is
| preventing me from downloading new "critical" updates for windows.
| "update.exe generated errors and..."
| Searched the web and news groups and found nothing helpful. Any thougths?
|
| --
| Thanks,
| Szymon
|

Doesn't even come close to Sasser (Lsass) or Lovsan/Blaster (RPC/RPCSS DCOM) problem.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

5 Apr 2005 3:31 AM

Steve N.

Szymon "Szymszy" Seliga wrote:

> Any time I insert my pendrive in the USB slot, while the device is being
> installed, sasser/blaster like window pops out exept for one line which
> states "The sysetm process c:\\winnt\system32\services.exe...(and so on)"
> And ofcourse the 1 minute countdown till shutdown begins. And this is the
> only moment this happens.

Svchost.exe will issue that message anytime it crashes. It doesn't
necessarily indicate an infection, but just that a critical instance of
svchost.exe was forced to exit abnormally.

Experiment:
In Task Manager, Processes, start killing off instances of svchost.exe
and see what happens.

> I've got sp4.(win2k), norton firewall, anti-virus.

Have you looked at the Norton Firewall and A/V settings?

However "something is

> preventing me from downloading new "critical" updates for windows.
> "update.exe generated errors and..."
> Searched the web and news groups and found nothing helpful. Any thougths?
>

Look in Event Viewer for errors in the System category.

Steve