Thanks for the suggestion, we do have an AD that is giving intermittant trouble on the same site. I'll have a look into that.

Sasser is definitely not infecting the server....