Worm Alert - SASSER.A >>Removal Solution on Thread<<

[pgp_protector]

Just a heads up that there's a nother virus making it rounds.

Worm Info --> Sasser.A Worm


Simple soution

 

[WildHeart75]

Thanx, wish I seen this post yesterday. Apparently my main comp has been infected since it just keeps restarting over and over for no apparent reason. Now I have to use my other comp, which really sucks. I have no idea how to fix the one that is infected since I can't get on it.

Forgot to mention that I have PC-CILLIN and Norton anti-virus! Neither dtected anything

 

[JOYfulbeliever]

WildHeart - when you get the System Shutdown message, go to Start, Run and type in shutdown -a before it restarts. This will stop the shutdown and give you a chance to get the updates from Microsoft that you need to get rid of it.

I had the worm...ugh. Thought I would end up throwing the computer into the river, but that is what I had to do, to be able to download the critical updates from Microsoft, as well as updating my virus scan since it wasn't finding the worm. It's cleaned now and haven't had any more system shutdowns or any other problems with the computer.

 

[pgp_protector]

One other bit of advice

MS has there Update CD Avalable (Youll half to search dont have the link) it contains all the Updates and patches up to Feburary 2004 on a FREE CD, worth it for though of you who are using Dileup

 

[Phoenix]

Haha .. i ordered that CD yesterday. I had the damn thing too. Very frustrating. I believe the computer had both the sasser a and sasser d virus. As i had both skynet.exe and avserve.exe running in my task manager. If you can get into your task manager - alt + control + delete or control + shift + esc you can stop them from running. By clicking on them and ending the task. I'm not a computer person, but i believe that will at least let you start working on removing the virus. Go to Microsoft get the necessary downloads and such. I also updated my virus software to the most current available. That seems to have stamped them both out.

Good luck.

 

[t3hs0x]

The patch from Microsoft will prevent ur computer from getting infected... There's always a few ways to do it.. One simple way it to, get the worm removal tool from symantec.. Unplug the cables from ur modem, terminate aserve or skynet or this thing with _17623 <-- digits.. Then use the worm removal tool.. And windowsupdate.. Although many ways to counter it has been given.. This is another way =]

 

[pgp_protector]

FYI: Update on the worm

The Got the "person" the created this version

 

[caitlincares]

Thanks for the information on the solution.
I need to double check that my automatic updates are still happening.

 

[phantasma]

Sasser Virus Removal Tool
download.microsoft.com/download/1/e/b/1eba8a6e-a22a-431f-9df4-a0cd2873e3c5/Windows-KB841720-ENU-V4.exe

Patch to prevent future infections
download.microsoft.com/download/6/1/5/615a50e9-a508-4d67-b53c-3a43455761bf/WindowsXP-KB835732-x86-ENU.EXE

 

[marduke]

i made sure i updated the minute i heard about it....

i remember the blaster virus when i got hit.. just got finished formatting and reinstalling everything, then i setup my cable connection, and within 20seconds of being on WHAM! "your computer will restart in 30seconds" GGRRRRRR..... so i just formatted it again and started all over... but this time i applied the patch before i connected the internet.. lol