Sasser worm..... HELP!!!!

  • This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Stanky105

Anti-Spoon & Anti-Monkey
Joined
Mar 23, 2003
Messages
1,206
Likes
43
#1
I have that fucking sasser worm on my computer, and I think it is invulnerable. The window's security patch did shit, the window's anti sasser program did shit, and the f-secure anti sasser program did shit.

I am currently on my roomate's computer because the sasser worm keeps mine from going on the net. Does anybody know any programs that they KNOW work? I am desperate here, nothing has effected the worm. The worm blocks my internet and randomly restarts my computer. To all of you computer people out there..... HELP!!!!
 

disturbed2

<strong>Formerly disturbed2</strong>
Joined
Feb 1, 2003
Messages
5,896
Likes
431
#2
Get a bird.


OR


Trow your computer out the nearest 10 story window :D



Sorry man, I dont know. Maybe Norton Antivirus.

Wait for Anj or droog.
 

Oli

Member
Joined
Mar 28, 2004
Messages
895
Likes
222
#3
Check your registery HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
delete the command that executes the worm from here. It refers to "avserve2.exe", delete this file too. It is usually found in the windows directory on your harddrive, for example c:\windows or c:\winnt

symantec removal tool try this, download it from the computer you are using now and transfer it to your other computer.
 
Last edited:

Stanky105

Anti-Spoon & Anti-Monkey
Joined
Mar 23, 2003
Messages
1,206
Likes
43
#4
oli said:
Check your registery HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
delete the command that executes the worm from here.
Not to sound too computer illiterate, but how exactly do I check the registry?
 

Oli

Member
Joined
Mar 28, 2004
Messages
895
Likes
222
#5
Stanky105 said:
Not to sound too computer illiterate, but how exactly do I check the registry?
Execute regedit.exe, it is supplied with windows and will be found in the windows directory.
 

catgarvin

*****.ebaumsworld.com
Joined
Oct 15, 2003
Messages
3,469
Likes
619
#6
I get these email updates all the time about this stuff. He used to post them in this forum too but I guess he doesn't do it anymore.
Anyway, I don't know if you have the sasser A, B or what but here :
For more information on WORM_SASSER.B, you can visit our Web site at:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SASSER.B.

Is the site address that came with an update.
 

Stanky105

Anti-Spoon & Anti-Monkey
Joined
Mar 23, 2003
Messages
1,206
Likes
43
#7
Hmm, ok, apparantly now the sasser worm is gone. I ran that check thing that oli sent me for the last time and it said the worm was not found. The odd thing this, the damage done is still there.... I still can't get on the internet.... AARG!
 

Oli

Member
Joined
Mar 28, 2004
Messages
895
Likes
222
#8
Stanky105 said:
Hmm, ok, apparantly now the sasser worm is gone. I ran that check thing that oli sent me for the last time and it said the worm was not found. The odd thing this, the damage done is still there.... I still can't get on the internet.... AARG!
You may have to reset a number of settings after the worm has been removed, check your connection settings etc..
 

Karly

giggity
Joined
May 17, 2003
Messages
2,393
Likes
91
#9
*in mandark voice*
HAHAHAHAHAHAHAHAHHAHAHAHAHA!!!!!!!!

sorry but i find it amusing that windows lets users know what its system is vurnerable to & its all cuz there shit is ghey. have any of you ever thought about the fact that perhaps the microsoft corp may be responsible for all these viruses? it only makes ppl order all this anti virus shit that they recommend. just a thought.
 
R

RFAlias

#10
they dont let people know, people find the exploits, windows releases the fix.

Get a simple firewall.
The reason linux dosent get viruses that often is because people creating these things want to hit a wide range of people so they can leave their mark.
Linux isnt exactly a wide range.
Im not going to get linux and sacrafice ease of use and other features just to avoid the occasional worm that i wouldnt get anyways.

Not really worth it IMO, all the stuff i use on windows isnt allways avaliable for Linux.
 

Oli

Member
Joined
Mar 28, 2004
Messages
895
Likes
222
#11
mamichuli said:
it only makes ppl order all this anti virus shit that they recommend. just a thought.
I pirate my antivirus software, to be honest ive never spent anything on software. That includes my virus definition subscription.

I know im not the only one. Also my IP changes dialy, so Im not easy to identify.
 
Last edited:

Stanky105

Anti-Spoon & Anti-Monkey
Joined
Mar 23, 2003
Messages
1,206
Likes
43
#12
OK, here is where I seem to be:

Evidentally my computer is trying to dial up a connection. (My computer is on the school's LAN.) I went into internet options and made sure all references to a dial-up modem were blank, as they were before the worm.

When try using a webpage, the window acts rather ponderous, as if the computer was thinking a lot to try to use it. Nothing every comes up when I type in the address except a "could not find site" or one of the adware programs that leap in on those, and those don't even load.

At the bottom of the window where it says "opening page" sometimes it says "detecting proxy settings" or something to that effect.

Anybody have any clue whats going on?? :(
 

Stanky105

Anti-Spoon & Anti-Monkey
Joined
Mar 23, 2003
Messages
1,206
Likes
43
#15
anjroo11688 said:
Check out these links, hope I helped. :) Click it
Click here also
Yeah, actually those are the steps I have taken already. Back when I said that the windows security update did shit I think I might have actually been mistaken. I assumed that since I couldn't connect to the internet, the worm was still active. The windows update may have actually killed the worm because Oli's scanner thing said it couldn't find the worm.

So basically, the worm left me with a botched up internet that I have no idea how to fix. Man, isn't there some program that you can download for windows that scans it and says exactly what is wrong with it..? :p :D
 

disturbed2

<strong>Formerly disturbed2</strong>
Joined
Feb 1, 2003
Messages
5,896
Likes
431
#16
Stanky105 said:
Yeah, actually those are the steps I have taken already. Back when I said that the windows security update did shit I think I might have actually been mistaken. I assumed that since I couldn't connect to the internet, the worm was still active. The windows update may have actually killed the worm because Oli's scanner thing said it couldn't find the worm.

So basically, the worm left me with a botched up internet that I have no idea how to fix. Man, isn't there some program that you can download for windows that scans it and says exactly what is wrong with it..? :p :D
if you read this article you will be able to find out that it comes through emails mostly and attacks at home computers most.
 

Stanky105

Anti-Spoon & Anti-Monkey
Joined
Mar 23, 2003
Messages
1,206
Likes
43
#17
disturbed2 said:
if you read this article you will be able to find out that it comes through emails mostly and attacks at home computers most.
No offense, but are you being sarcastic? The link says the opposite.
 
V
#18
i need help

i think my computer has the sasser worm however windows does not boot. the computer keeps restarting and shutting down again right after the windows xp loading screen comes up. letting the computer run in safe mode doesnt help and it just does not let windows boot up. if anyone has any info on this it would be greatley appreciated