Comments on: Sasser… UGHHHHHH http://itknowledgeexchange.techtarget.com/itanswers/sasser-ughhhhhh/ Thu, 26 Nov 2009 14:06:28 +0000 http://wordpress.org/?v=2.6.2 By: Mshen http://itknowledgeexchange.techtarget.com/itanswers/sasser-ughhhhhh/#comment-61614 Mshen Tue, 31 Mar 2009 04:34:11 +0000 #comment-61614 The LSASS exploit was fixed with Service Pack 2. If an up-to-date virus scan can't find any viruses, you should check for conflicting applications. If you use applications similar to TweakXP, you may run into issues like the one you described. The LSASS exploit was fixed with Service Pack 2. If an up-to-date virus scan can’t find any viruses, you should check for conflicting applications. If you use applications similar to TweakXP, you may run into issues like the one you described.

]]> By: KevinBeaver http://itknowledgeexchange.techtarget.com/itanswers/sasser-ughhhhhh/#comment-61505 KevinBeaver Fri, 27 Mar 2009 19:53:12 +0000 #comment-61505 Yeah, this may not be a malware issue...or a hardware issue. Lsass.exe is a legitimate service for Windows security policy enforcement. What happens when you boot to safe mode with networking? Yeah, this may not be a malware issue…or a hardware issue. Lsass.exe is a legitimate service for Windows security policy enforcement. What happens when you boot to safe mode with networking?

]]> By: BigMike10 http://itknowledgeexchange.techtarget.com/itanswers/sasser-ughhhhhh/#comment-61372 BigMike10 Wed, 25 Mar 2009 15:41:40 +0000 #comment-61372 "Search and Destroy" (not to be confused with "SpyBot Search and Destroy" is at least Malware. Please see the F-Secure WebLog at http://www.f-secure.com/weblog/archives/00001545.html Also, I did download the Search and Destroy product (in my Lab) and Symantec A/V detected it as MalwarePro, a "Misleading Application" “Search and Destroy” (not to be confused with “SpyBot Search and Destroy” is at least Malware. Please see the F-Secure WebLog at <a href="http://www.f-secure.com/weblog/archives/00001545.html" title="http://www.f-secure.com/weblog/archives/00001545.html" target="_blank">http://www.f-secure.com/weblog/archives/…</a>

Also, I did download the Search and Destroy product (in my Lab) and Symantec A/V detected it as MalwarePro, a “Misleading Application”

]]>