infected with Sasser

My averatec 3250 is infected with the Sasser worm. I have read a lot of
unproven ways of getting rid of this worm.

Anyone know the correct way of handling this worm?

Thanks

Ted
Mon Oct 31 15:02:18 CST 2005

There are many varieties of Sasser.

Try this:
http://housecall.trendmicro.com/

--
Ted Zieglar
"You can do it if you try."

"Ryan" <Ryan@discussions.microsoft.com> wrote in message
news:0DBD2EDF-A704-4365-8755-8F16638C8E62@microsoft.com...
> My averatec 3250 is infected with the Sasser worm. I have read a lot of
> unproven ways of getting rid of this worm.
>
> Anyone know the correct way of handling this worm?
>
> Thanks

Ryan
Mon Oct 31 15:31:07 CST 2005

I don't know the variant is. All I know it said "NT Authority" .... "30
seconds before it shutdown."

I can't make it to the Housecall website because every time I try to boot,
it reboots my computer before I can make it to the desktop.

What should I do because I can't get online?

"Ted Zieglar" wrote:

> There are many varieties of Sasser.
>
> Try this:
> http://housecall.trendmicro.com/
>
> --
> Ted Zieglar
> "You can do it if you try."
>
> "Ryan" <Ryan@discussions.microsoft.com> wrote in message
> news:0DBD2EDF-A704-4365-8755-8F16638C8E62@microsoft.com...
> > My averatec 3250 is infected with the Sasser worm. I have read a lot of
> > unproven ways of getting rid of this worm.
> >
> > Anyone know the correct way of handling this worm?
> >
> > Thanks
>
>

TAJ
Mon Oct 31 15:46:48 CST 2005

Ryan

see
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

http://vil.nai.com/vil/stinger/


You need to start your computer up in safe mode - then set either of the
above running.


"Ryan" <Ryan@discussions.microsoft.com> wrote in message
news:BD2BEBEE-67C4-4C96-963B-8E5E952A218A@microsoft.com...
>I don't know the variant is. All I know it said "NT Authority" .... "30
> seconds before it shutdown."
>
> I can't make it to the Housecall website because every time I try to boot,
> it reboots my computer before I can make it to the desktop.
>
> What should I do because I can't get online?
>
> "Ted Zieglar" wrote:
>
>> There are many varieties of Sasser.
>>
>> Try this:
>> http://housecall.trendmicro.com/
>>
>> --
>> Ted Zieglar
>> "You can do it if you try."
>>
>> "Ryan" <Ryan@discussions.microsoft.com> wrote in message
>> news:0DBD2EDF-A704-4365-8755-8F16638C8E62@microsoft.com...
>> > My averatec 3250 is infected with the Sasser worm. I have read a lot of
>> > unproven ways of getting rid of this worm.
>> >
>> > Anyone know the correct way of handling this worm?
>> >
>> > Thanks
>>
>>

PA
Mon Oct 31 19:23:11 CST 2005

What You Should Know About Sasser:
http://www.microsoft.com/security/incident/sasser.mspx

Windows version?

Is the machine up-to-date at Windows Update?

If WinXP, is SP2 installed? Is the Windows Firewall or a third-party one
enabled?

Before You Connect a New Computer to the Internet
http://www.cert.org/tech_tips/before_you_plug_in.html

Protect Your PC
http://www.microsoft.com/athome/security/protect/

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), AH-VSOP

Ryan wrote:
> My averatec 3250 is infected with the Sasser worm. I have read a lot of
> unproven ways of getting rid of this worm.
>
> Anyone know the correct way of handling this worm?
>
> Thanks