sasser worm??

The machines we love to hate

Moderator: Wiz Feinberg

Dr. Hugh Jeffreys
Posts: 738
Joined: 24 Sep 2001 12:01 am
Location: Southaven, MS, USA
State/Province: -
Country: United States

sasser worm??

Post by Dr. Hugh Jeffreys »

My #2 computer (compaq presario by H-W) has what Earthlink says is a sasser worm. When I go to the Inet and type in another URL, I get a dialog box reading "shut down in 59 sec, save materials." Earthlink also says they are having much difficulty due to overwhelming traffic. I did a Recovery dating back to Dec 19, 05.No help. Any ideas guys? HJ
User avatar
Wiz Feinberg
Posts: 6118
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA
State/Province: Michigan
Country: United States

Post by Wiz Feinberg »

Hugh;
It sounds from the shutdown in 60 seconds like you have the Blaster Worm, or a successor of it. If you are not familiar with troubleshooting and removing viruses you may be better off taking the computer to a competent service station and have them disinfect it.

If you want to go after the infection yourself you must first stop the computer from shutting down after 60 seconds. I have instructions for this on my FAQs page, under the question "Why does my Windows 2000 or XP computer shutdown, or keep rebooting after 60 seconds and how can I fix it?"
EDIT: The constant rebooting answer page is here.
Read and printout the details using another computer, then apply it to your infected one. Purchase a good anti virus product that is up to date, and install it. If you are able to stay online with my instructions update the AV definitions, then run a full system scan. Have it delete all trojans, worms, viruses that it finds. You may need to reboot several times, so keep my instructions handy. You should also download all available Windows Updates and install them. Lastly, get a firewall and install it (see my FAQs for info).

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
<small>Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage.
Learn about current computer virus and security threats here. </small>


<font size="1" color="#8e236b"><p align="center">[This message was edited by Wiz Feinberg on 29 March 2006 at 09:24 PM.]</p></FONT>
Dr. Hugh Jeffreys
Posts: 738
Joined: 24 Sep 2001 12:01 am
Location: Southaven, MS, USA
State/Province: -
Country: United States

Post by Dr. Hugh Jeffreys »

Wiz - Many thanks; I'll follow your instructions as soon as I can. BTW the pc only shuts down after I've been on the Inet for a few seconds, otherwise it's ok. I had no trouble until I signed onto the net; I cancelled my net service yesterday, however, I can re=instate it with a phone call. Thanks again and I'll keep you posted. HJ
User avatar
Bill Ferguson
Posts: 5899
Joined: 4 Aug 1998 11:00 pm
Location: Milton, FL USA
State/Province: -
Country: United States

Post by Bill Ferguson »

Wimpy (Larry Sasser) won't be happy to hear there is a "worm" named after him
hehe
Bill
Dr. Hugh Jeffreys
Posts: 738
Joined: 24 Sep 2001 12:01 am
Location: Southaven, MS, USA
State/Province: -
Country: United States

Post by Dr. Hugh Jeffreys »

At first I thought it was a SENATOR!!