Hey, we have server 2003 Small Business Edition, we went online to download the critical patches for it, which include the patch for sasser, and anyway, before we finished downloading it, we got it, we adventually got the patch on and after patching and installing the server we put NOD32 ver 2 on . because last time we put it one before we configured the server and it screwed everything up, we rang microsoft and they said dont put the anti virus on until last, so thats what we did. so in the end, we have it all set up with NOD32 and update def's. We scan the server, and no virus? yet it still resets itself with file lsass.exe. We download the cleaner by Paolo monti and that wont pick it up either, microsoft didnt have a cleaner for server 2003, and yeah, nothing will pick it up. Maybe, is it because we got changed the service, Remote Procedure Call to on failure to restart the service rather than restart the PC, because that way it doesnt reboot on ya. Anyway can some one please verify this.