Massassi Forums Logo

This is the static archive of the Massassi Forums. The forums are closed indefinitely. Thanks for all the memories!

You can also download Super Old Archived Message Boards from when Massassi first started.

"View" counts are as of the day the forums were archived, and will no longer increase.

ForumsDiscussion Forum → I think I have the msblast worm.
I think I have the msblast worm.
2004-07-06, 7:33 PM #1
This is just great, I have my firewall disabled for 10 minutes and then I get an error saying that lsass.exe has performed and error then a box comes up telling me that I have 60 seconds to save all my work before the computer restarts. There seems to be no problem right now, but anyway, if I remember corectally, it sounds like the msblast worm, I figured that windows update would automatically download it but I guess not, so if anyone could give me a link to the fix for the msblast, I'd really appreciate it. Thanks.

------------------
*Takes out his blaster and fires shots at the wall, the blastmarks leave the words "S-TROOPER WUZ 'ERE!!!"
2004-07-06, 7:39 PM #2
At least I thought it was the msblast worm, I've been on the internet for almost 10 minutes and from what I remember, msblast shuts it down after being on for about 2 minutes. Could it have just been a random error?

[EDIT]Posting at the same time = bad.. anyway, I'm beginning to think it was just a random crash. I'll bet I was over-reacting just a little bit. I've had some spyware problems lately and must be a little jumpy about things. Thanks though.[/EDIT]

------------------
*Takes out his blaster and fires shots at the wall, the blastmarks leave the words "S-TROOPER WUZ 'ERE!!!"

[This message has been edited by Stormtrooper (edited July 06, 2004).]
2004-07-06, 7:39 PM #3
Um, to my knowledge there are other errors in windows that can cause it to start a restart timer and crash. I have had it happen to me before and I already had the msblast patch installed. If it hasn't happened again, it is probably fine, if not microsoft does have the patch availible for download somewhere on their site.
2004-07-06, 7:53 PM #4
http://www.microsoft.com/security/incident/blast.mspx

Well, DID you do updates? At least the critical ones?

------------------
"Music is the universal language and the
dialect we speak in is Hip Hop!" - King Solomon
2004-07-06, 8:04 PM #5
I download and install whatever updates it shows on the windows updater when it pops up. Thanks for the link.

------------------
*Takes out his blaster and fires shots at the wall, the blastmarks leave the words "S-TROOPER WUZ 'ERE!!!"
2004-07-06, 10:06 PM #6
You probably have the sasser worm, not to be confused with msblast. There's a removal tool somewhere, try googling for it.

------------------
WAITER: Here’s your green salad, sir.
ANAKIN: What? You fool, I told you NO CROUTONS! Aaaaaaargh!
The music industry is a cruel and shallow money trench where thieves and pimps run free, and good men die like dogs. There's also a negative side.
2004-07-07, 4:44 AM #7
Yeah, that would more like Sasser...

http://www.google.com/search?q=sasser+removal+tool

------------------
Dear lady, can you hear the wind blow, and did you know
Your stairway lies on the whispering wind.
:wq
And when the moment is right, I'm gonna fly a kite.
2004-07-07, 7:25 AM #8
I was reading through some of the descriptions of sasser and what it does and I don't have any of the things it creates (the exe in the windows dir or the registry value it creates) so how can I tell if I have it? Shouild I just run the removal utility then patch against it even if I might already be patched against it?

------------------
*Takes out his blaster and fires shots at the wall, the blastmarks leave the words "S-TROOPER WUZ 'ERE!!!"
2004-07-07, 9:58 AM #9
Quote:
<font face="Verdana, Arial" size="2">Originally posted by Stormtrooper:
I was reading through some of the descriptions of sasser and what it does and I don't have any of the things it creates (the exe in the windows dir or the registry value it creates) so how can I tell if I have it? Shouild I just run the removal utility then patch against it even if I might already be patched against it?

</font>


Can't hurt.

------------------
"The future is not determined by a throw of the dice, but is determined by the conscious decisions of you and me."
I am addicted to ellipses!!! AHHH!!! ...
Make Sorrowind Worthwhile... join it! http://sorrowind.net
2004-07-07, 3:57 PM #10
Ive seen a few variants of Sasser that dont show up *AT ALL*, that the removal tools dont see, but still crash the system. The only defense against those is to reinstall the OS.

------------------
Dear lady, can you hear the wind blow, and did you know
Your stairway lies on the whispering wind.
:wq
And when the moment is right, I'm gonna fly a kite.
2004-07-07, 4:57 PM #11
Quote:
<font face="Verdana, Arial" size="2">Originally posted by GBK:
Ive seen a few variants of Sasser that dont show up *AT ALL*, that the removal tools dont see, but still crash the system. The only defense against those is to reinstall the OS.

</font>


They show up, but not in any conventional means that the tools are equipped to deal with. You can remove them, but it involves editing several registery keys and deleting seemingly harmless .ocx and .dll files. But for the most part, this man speaks the truth. [http://forums.massassi.net/html/smile.gif]

------------------
-=I'm the wang of this here site, and it's HUGE! So just imagine how big I am.=-
1337Yectiwan
OSC Returns!!
10 of 14 -- 27 Lives On
-=I'm the wang of this here site, and it's HUGE! So just imagine how big I am.=-
1337Yectiwan
The OSC Empire
10 of 14 -- 27 Lives On
2004-07-08, 6:16 AM #12
Well, I don't think I have anything wrong with my computer because I've had 0 problems since then. I think I was just taxing my computer too much by running way to many programs, I really need to upgrade. Thanks anyway.

------------------
*Takes out his blaster and fires shots at the wall, the blastmarks leave the words "S-TROOPER WUZ 'ERE!!!"

↑ Up to the top!