Computing.Net > Forums > Security and Virus > Sasser Removal?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Sasser Removal?

Reply to Message Icon

Name: gavroche23
Date: May 17, 2004 at 19:06:55 Pacific
OS: WIN XP
CPU/Ram: Athlon/ 512 MB
Comment:

Hey guys. My fam's comp is all sorts of infected. Among the plagues is Sasser. When I read up on how to remove it, I came across the following steps...
To prevent the shut down, do the following:

Disconnect the computer from the network/Internet connection. (Disconnect the cable if necessary.)
Restart the computer.
As soon as Windows opens and you see the Windows desktop, click Start > Run.
Type:

cmd

and press Enter.


Type:

shutdown -i

and press Enter.


In the Remote Shutdown Dialog that opens, do the following:

Click Add, type your computer name into the Add Computers dialog box, and then click OK.
In the "Display warning for" field, type 9999.
Type the following text in the Comment box:

Delay Lsass.exe shutdown.


Click OK.


Reconnect the network/Internet connection.
Connect to the Internet, and get the patch. Then continue with the steps described below.

When you have patched your computer and removed the threat, you can re-enable the 20 second default warning if you wish.

Now I feel foolish, but what do I enter as my "computer name" in the "Add Computers dialog box"?

Thanks in advance for the help.
Pete



Sponsored Link
Ads by Google

Response Number 1
Name: Dante
Date: May 17, 2004 at 20:26:20 Pacific
Reply:

hehe, I think a shutdown-a will suffice.

but if you insist on going this route, opening up your system tab in the control panel should reveal your computer name.


0

Response Number 2
Name: gavroche23
Date: May 18, 2004 at 15:47:06 Pacific
Reply:

Thanks Dante.
Im not going to tell you what the name of the comp is, cause it's pretty embarrassing.
Anyway, on to more troubleshooting. This thing is totally infected.
later!
Pete


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


[php] http_referer Trojan Downloader



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Sasser Removal?

Sasser Worm www.computing.net/answers/security/sasser-worm/11455.html

Sasser virus, slow programs? www.computing.net/answers/security/sasser-virus-slow-programs/14021.html

LSASS.EXE / Sasser DESPERATE www.computing.net/answers/security/lsassexe-sasser-desperate/20141.html