Forum Home
Press F1
 
Thread ID: 44873 2004-05-02 07:44:00 Sasser worm on XP, very agressive, beware lsass.exe problem robo (205) Press F1
Post ID Timestamp Content User
233692 2004-05-04 04:38:00 Question this worm or worms can you use the same removal tool for any or all of the above mentioned worms or do you need to know which version worm you have? and have a new updated removal prog????


i havent got it and havent had any of these blaster ones either so am a bit lost, and a friend asked me as her machine has got it.


beetle
beetle (243)
233693 2004-05-04 04:47:00 Hello beetle :)

> Question this worm or worms can you use the same
> removal tool for any or all of the above mentioned
> worms or do you need to know which version worm you
> have? and have a new updated removal prog????

If I understand you correctly & you are just talking about the different version of the Sasser worm, then I think (some one will correct me if I am wrong) yes you can use the same removal tool for the different version of the Sasser worm

Hops this helps, if not post back here.

>>i havent got it and havent had any of these blaster ones either

You are very lucky :), join the club of people who have not got it either :D :)( that includes me, because I am running Win ME ;))
stu120404 (268)
233694 2004-05-04 06:30:00 Beetle,

The program Stinger, does a wonderful job on a host of late-model malware. It is constantly being upgraded, so download when needed.
It is available here (vil.nai.com)
Pheonix (280)
233695 2004-05-04 08:26:00 And does she need to do anything else????

she did updates in the weekend she said?????so im lost as to why she got the beasty????

she does only use XP firewall though.

beetle
beetle (243)
233696 2004-05-04 08:33:00 If you go here there is a quick check to see whether or not your computer has the virus. I have tried it and it takes about a minute including the very small d/l.

www.microsoft.com
zqwerty (97)
233697 2004-05-05 06:40:00 Another question,

on a non computer site they are telling people this little ditty of info .



1 . Press Ctrl+Alt+Delete once .
2 . Click Task Manager .
3 . Click the Processes tab .
4 . Double-click the Image Name column header to alphabetically sort the processes .
5 . Scroll through the list and look for the following processes:
* avserve . exe
* any process with a name consisting of four or five digits, followed by _up . exe (for example, 74354_up . exe) .
6 . If you find any such process, click it, and then click End Process .
7 . Exit the Task Manager .




this will just disable it wont it? not get rid of it?
you still need to remove it dont you .

i cant see the point in saying this as it wont get rid of it . . . . . . .

?:|

beetle
beetle (243)
233698 2004-05-05 06:53:00 >on a non computer site they are telling people this little ditty of info.

That is just a copy and paste from information that Symantec (and others) have on their sites on how to end the process first.

Symantec's Sasser information (securityresponse.symantec.com)

If you follow the instructions in the above link, they tell you exactly what steps you need to follow to remove the worm.
Jen C (20)
1 2 3 4