Sasser or what ? ?

porpoise · 13-05-2004, 10:31

Last week I guess I got the Sasser worm, even though I had downloaded the Microsoft update on April 14th.I ran the Symantec removal tool which said 'not found' but my PC worked fine. Yesterday I installed the critical update and this morning I had the symptoms of Sasser, I ran the Symantec removal tool, which said 'not found' but my PC is, obviously, working fine again now.

altis · 13-05-2004, 10:52

What symptoms did you observe?

http://securityresponse.symantec.com...sser.worm.html
...lists only two visible ones. Do you have a file called avserve.exe in your windows directory or one called win.log in the root of C:?

zovat · 13-05-2004, 11:23

what OS are you running - as you need to run the tool in safe mode if you are on 95/98/ME.

The worm doesn't work on these OSs so would be hard to detect...

HTH

porpoise · 13-05-2004, 12:12

I don't have either of those on my system.
I'm running XP -Pro. I did re-start in safe mode, turned off system restore etc etc. It's just so odd that it's alright now.

rdhw · 13-05-2004, 14:17

Quote:

Originally Posted by porpoise

Last week I guess I got the Sasser worm, even though I had downloaded the Microsoft update on April 14th.I ran the Symantec removal tool which said 'not found' but my PC worked fine. Yesterday I installed the critical update and this morning I had the symptoms of Sasser, I ran the Symantec removal tool, which said 'not found'

What led you to think you had the Sasser worm, if every diagnostic you ran said that Sasser was not found?

porpoise · 13-05-2004, 23:45

The symptoms were the same as sasser, continuously stuck in a loop re starting.

Alan Waddington · 13-05-2004, 23:49

Quote:

Originally Posted by porpoise

The symptoms were the same as sasser, continuously stuck in a loop re starting.

I believe that can also sometimes happen due to a faulty install script, but then i could be talking complete b0010cks