Server 2003 sassa
21 March 2006, 07:26 PM
#1
Scooby Regular
Thread Starter
Join Date: Apr 2001
Location: Northamptonshire
Posts: 630
Likes: 0
Received 0 Likes
on
0 Posts
Server 2003 sassa
Oh dear,
My test server seems to have the sassa virus on it, problem is I can't even get ctrl+alt+del to display login screen. Any ideas before I zap the drive?
Can't VNC to it either.
Ta
My test server seems to have the sassa virus on it, problem is I can't even get ctrl+alt+del to display login screen. Any ideas before I zap the drive?
Can't VNC to it either.
Ta
21 March 2006, 10:26 PM
#2
Scooby Regular
Join Date: Nov 2001
Location: Leeds - It was 562.4bhp@28psi on Optimax, How much closer to 600 with race fuel and a bigger turbo?
Posts: 15,239
Likes: 0
Received 1 Like
on
1 Post
use BART PE, Knoppix, ERD Commander,
or stick the drive in another machine and clean from there.
And remove VNC from 2003.. whats the need??
MSTSC /Console
David
or stick the drive in another machine and clean from there.
And remove VNC from 2003.. whats the need??
MSTSC /Console
David
22 March 2006, 07:12 PM
#3
Scooby Regular
Thread Starter
Join Date: Apr 2001
Location: Northamptonshire
Posts: 630
Likes: 0
Received 0 Likes
on
0 Posts
Cheers David,
Now I'm not sure whether it is sasser or not. I booted the server using a BERT XP config and could find no files on C: associated to it:
avserve.exe
avserve2.exe
skynetave.exe
The NOD32 was also upto date.
And I can't even get to the login screen.
Now I'm not sure whether it is sasser or not. I booted the server using a BERT XP config and could find no files on C: associated to it:
avserve.exe
avserve2.exe
skynetave.exe
The NOD32 was also upto date.
And I can't even get to the login screen.
23 March 2006, 07:36 AM
#5
Scooby Regular
Thread Starter
Join Date: Apr 2001
Location: Northamptonshire
Posts: 630
Likes: 0
Received 0 Likes
on
0 Posts
Yep, can get into safe mode without net support. If I try SM with net support, same issue, pressing ctrl+alt+del does nothing and the lsass shutdown message appears.
Ran a couple of utilities FXsasser.exe and stng260.exe, but they didn't seem to find anything on C:, so I stopped them when they started on other drives.
Funny thing is, the server was fine until I installed 2003 SP1. I also recall this happening to me a couple of years ago, again shortly after SP1 was installed.
I've downloaded a couple of updates which I'll install this evening.
Ran a couple of utilities FXsasser.exe and stng260.exe, but they didn't seem to find anything on C:, so I stopped them when they started on other drives.
Funny thing is, the server was fine until I installed 2003 SP1. I also recall this happening to me a couple of years ago, again shortly after SP1 was installed.
I've downloaded a couple of updates which I'll install this evening.
23 March 2006, 11:30 AM
#6
Scooby Regular
Join Date: Nov 2001
Location: Leeds - It was 562.4bhp@28psi on Optimax, How much closer to 600 with race fuel and a bigger turbo?
Posts: 15,239
Likes: 0
Received 1 Like
on
1 Post
im assuming its a 'legit' copy.. ?
When it gets to the gina, can you connect remotely? IE \\Servername\c$
is it responding to pings?
is RDP enabled?
When it gets to the gina, can you connect remotely? IE \\Servername\c$
is it responding to pings?
is RDP enabled?
23 March 2006, 01:18 PM
#7
Scooby Regular
Thread Starter
Join Date: Apr 2001
Location: Northamptonshire
Posts: 630
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by David_Wallis
im assuming its a 'legit' copy.. ?
When it gets to the gina, can you connect remotely? IE \\Servername\c$
is it responding to pings?
is RDP enabled?
When it gets to the gina, can you connect remotely? IE \\Servername\c$
is it responding to pings?
is RDP enabled?
Nope, cannot connect, you can ping for a while, but you cannot connect during this time, the the ping replies stop. RDP is enabled.
Trending Topics
Thread
Thread Starter
Forum
Replies
Last Post