im geting a lsass.exe error i think its sassor but

Discussion in 'Windows Update' started by jay, May 2, 2004.

  1. jay

    jay Guest

    but when i go to get the patch Windows Update has encountered an error. This may be due to a discrepancy in your computer's time setting.

    To check your date and time setting:

    On the taskbar, double-click the time.
    Verify that the date and time is correct.
    comes up any help
     
    jay, May 2, 2004
    #1
    1. Advertisements

  2. Did you run stinger or manually remove the worm yet? Enable your
    firewall/configure one?

    Did you check your time/date settings on your computer?
     
    Lanwench [MVP - Exchange], May 2, 2004
    #2
    1. Advertisements

  3. You MAY have SASSER:
    http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html
    http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html

    There are removal instructions there (including a tool to help you.)

    My other suggestions to you include:

    Please Notice that if you use AOL, you should at least upgrade to 9.0 or
    greater before doing any of the fixes. I know you can get AOL 9.0 at almost
    any convenience store, gas station, super market or other retail outlet in
    the world, so this should not be a problem.


    Turn on that firewall...
    http://www.microsoft.com/WindowsXP/home/using/howto/homenet/icf.asp
    (It has been reported that it now works with AOL 9.0+)


    Make sure you have all the updates (critical) installed from:
    http://windowsupdate.microsoft.com/
    (Scan for updates, Review and Install)


    Get rid of the spy/ad/mal-ware..
    (Yes - using MORE than one of these..
    I recommend at least the first three. Also..
    UPDATE the definitions for them before using.)

    Spybot Search and Destroy
    http://www.safer-networking.net/

    Lavasoft AdAware
    http://www.lavasoft.de

    CWSShredder
    http://www.spywareinfo.com/~merijn/downloads.html

    Hijack This!
    http://mjc1.com/mirror/hjt/

    I also like "The Cleaner" and "SpywareBlaster" and "SpywareGuard".
    - http://www.moosoft.com/
    - http://www.javacoolsoftware.com/

    The first is a PAY product, but useable for 30 days - it has found and
    eliminated problems in the past the others did not. The latter two are
    prevention mechanisms. I like SpywareGuard for those with enough processor
    to have something running like antivirus software - and it prevents browser
    hijacking quite well. SpywareBlaster is a FANTASTIC free product, I suggest
    getting this after you cleanup and keeping it updated as well....

    And Assortment of Others:
    http://spywareinfo.com/


    After you cleanup your PC somewhat of spy/ad/mal-ware, verify your antivirus
    software is updated and run a full scan of your computer. If you have no
    antivirus software - get one NOW! Grisoft AntiVirus:
    http://www.grisoft.com/us/us_dwnl_free.php


    Empty your Temporary Internet Files and shrink the size it stores to about
    80 to 120MB (seems to be an optimal size for the normal user)

    - Open ONE copy of Internet Explorer.
    - Select TOOLS -> Internet Options.
    - Under the General tab in the "Temporary Internet Files" section,
    do the following:
    - Click on "Delete Cookies" (click OK)
    - Click on "Settings" and change the
    "Amount of disk space to use:" to something between 80MB
    and 120MB. (Betting it is MUCH larger right now.)
    - Click OK.
    - Click on "Delete Files" and select to
    "Delete all offline contents" (the checkbox) and click
    OK. (If you had a LOT, this could take 2-10 minutes or
    more.)
    - Once it is done, click OK, close Internet Explorer
    - Re-open Internet Explorer.


    Uninstall any software you do not use often/ever. (If you have something
    installed but never use it, uninstall it.) If you go through Control
    Panel -> Add/Remove Programs and see things you seldom if ever use, it is to
    your advantage to remove it.


    Also, if you are tired of Web Page Pop-Ups/Unders.. You could try the
    Google Toolbar.
    http://toolbar.google.com/


    Stop loading applications at logon.. run MSCONFIG and look under the startup
    tab for things you DON'T want to startup! Search the Internet with Google
    to discover what things are safe to remove and what things may even be
    malware infecting your computer.


    Better control your email and lessen the amount of time you spend dealing
    with SPAM:
    SpamBayes
    http://sourceforge.net/projects/spambayes/
    or
    Spamihilator.
    http://www.spamihilator.com
     
    Shenan Stanley, May 2, 2004
    #3
  4. jay

    jay Guest

    i have ran every thing i can think of but it didnt find nothing help plz
     
    jay, May 2, 2004
    #4
  5. To end the malicious process:
    Press Ctrl+Alt+Delete once.
    Click Task Manager.
    Click the Processes tab.
    Double-click the Image Name column header to alphabetically sort the
    processes.
    Scroll through the list and look for the following processes:
    avserve.exe
    any process with a name consisting of 4 or 5 digits followed by _up.exe
    (eg 74354_up.exe).
    If you find any such process, click it, and then click End Process.
    Exit the Task Manager.
    ------------------------------------------------------------------------

    Download Stinger to remove the worm. Run it in Safe Mode. It will fit on
    a floppy disk if you need to download it to another computer :
    http://vil.nai.com/vil/stinger

    Then install the patch to prevent it's reoccurrence from this page :
    http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx


    MowGreen [MVP]
    *-343-* Never Forgotten
     
    MowGreen [MVP], May 2, 2004
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.