How To Remove The Sasser Virus

Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Important Announcement: The winners of the BC Million Post contest have been announced. You can read who the winners are at this post.

- BleepingComputer Management

BleepingComputer.com > Security > Spyware and Malware Removal Guides and Reading Room

How to use the self-help guides

This forum contains self-help guides on removing common malware and viruses. These guides can be advanced so please use them at your own risk.

If after following the self-help guide, or you can not find an appropriate guide, then you can receive step-by-step instructions directly from one of our experts by following the instructions in this topic: Preparation Guide For Use Before Posting A Hijackthis Log

How To Remove The Sasser Virus, Self-Help Guide

Options

Grinler View Member Profile	Sep 28 2004, 02:58 PM Post #1
Bleep Bleep! Group: Admin Posts: 29,367 Joined: 24-January 04 From: USA Member No.: 3	This self-help guide will walk you through the steps to remove the Sasser virus. Symptoms in a HijackThis Log: QUOTE O4 - HKLM\..\Run: [avserve2.exe] C:\WINDOWS\avserve2.exe OR O4 - HKLM\..\Run: [avserve.exe] C:\WINDOWS\avserve.exe If you are infected with the sasser virus, your computer may shutdown on its own. If this happens, you can do the following to stop the shutdown: Click on Start then Run and type shutdown /a in the field and press the OK button. Now that the computer is not longer shutting down, you should go to this website: http://www.microsoft.com/security/incident/sasser.mspx This site contains information about the Sasser virus and has a tool that you can use to detect and remove it from your computer. If the Microsoft tool does not work, there are additional links to other removal tools at the bottom of the page. When the virus has been removed you should now run these two online virus scans to make sure there are no other remnants left behind: http://housecall.antivirus.com/ http://www.pandasoftware.com/activescan/ This is a self-help guide. Use at your own risk. BleepingComputer.com can not be held responsible for problems that may occur by using this information. If you would like help with any of these fixes, you can post a HijackThis log in our Hijackthis Logs Forums. If you have any questions about this self-help guide then please post those questions our AntiVirus, Firewall and Privacy Products and Protection Methods forum and someone will help you. -------------------- Lawrence

« Next Oldest · Spyware and Malware Removal Guides and Reading Room · Next Newest »

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)

0 Members:

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

Lo-Fi Version

Time is now: 22nd November 2008 - 07:44 AM

Advertise \| About Us \| Terms of Use \| Privacy Policy \| Contact Us \| Site Map \| Chat \| Tutorials \| Uninstall List
Discussion Forums \| The Computer Glossary \| Resources \| RSS Feeds \| Startups \| The File Database \| Malware Removal Guides