Virus help? Please?

[Brian Damage]

Um... I somehow picked up the W32.Sasser.Worm...

What was happeing was, while I was browsing here earlier, I got a message from windows that "Isass.exe" had unexpectedly terminated, and that the computer was going to be shut down in exactly one minute...

"Fine", I thought, "It's just windows being quirky"...

Later, after the restart, I was browsing here again, when Norton pops up and tells me that I have the "W32.Sasser.Worm", which was apparently only discovered yesterday... Or so the Norton site says...

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html

Apparently it does nothing except scan IPs for vulnerabilities... I don't even know how I got it... Does it send itself over the internet?

I'm also not sure how to remove it... I can't find the registry entries or the .exe it's supposed to use...

Anyone want to help?

 

[Brian Damage]

Okay, the little Norton warning just popped up again...

"Norton Antivirus has detected a virus on your computer.

Object Name: C:\WINDOWS\System32\11064_up.exe <- I guess that's the file I have to delete, yes?

Virus Name: Win32.Sasser.Worm

Action Taken: Unable to repair this file.



... So I guess I just delete the file? What do I do about that registry entry, though?

 

[Brian Damage]

What, am I an online leper now?

Doesn't anyone know what to do?

 

[lePobz]

Get a decent virus scanner that actually quarantines code instead of allowing it to execute! Norton sucks!

 

[Brian Damage]

And that decent virus scanner would be?

Free one?

 

[Shuzer]

And that decent virus scanner would be?

Free one?

www.avast.com
or
www.grisoft.com

 

[Brian Damage]

Oooookay... but I'd like to get rid of this bloody virus before I go getting another scanner...

 

[Shuzer]

Oooookay... but I'd like to get rid of this bloody virus before I go getting another scanner...

Can you delete/quarentine it? Most viruses that are unrepairable are safe to delete

 

[RoyaleWithCheese]

Brian try this:

http://www.virusalert.info/?p=virus&id=577&name=W32.Sasser.worm

edit: hmm seems that I'm infected too.....

 

[blahblahblah]

If I read the virus description right, it spreads by scanning for vunerable computers. So do you have a firewall installed and running on your computer?

 

[Brian Damage]

I just now switched on WinXP's internal firewall, which the Microsoft site says completely blocks the virus...

Now I just need to delete the damn thing... but I can't locate the given file or its registry entry. I've looked where it says to, but I can't find anything...

 

[blahblahblah]

I just now switched on WinXP's internal firewall, which the Microsoft site says completely blocks the virus...

Now I just need to delete the damn thing... but I can't locate the given file or its registry entry. I've looked where it says to, but I can't find anything...

Okay, when was the last time a microsoft product worked? Lets see...how about...never. You should get a 3rd party firewall.

http://download.com.com/3120-20-0.html?qt=firewall&tg=dl-2001

And have you gone to windows update site and downloaded all of the patches for windows?

 

[Brian Damage]

Yes, downloaded all the patches...

It's odd... the online scan I'm doing scanned the WINDOWS directory and couldn't find anything...

I'm just wondering if Norton has gotten rid of the virus this time... After the last (Second) time it popped up saying "you have a virus", and I got that error which made the computer restart, it hasn't detected the virus' activities a third time, and both times it had detected it earlier than this...

 

[blahblahblah]

Yes, downloaded all the patches...

It's odd... the online scan I'm doing scanned the WINDOWS directory and couldn't find anything...

I'm just wondering if Norton has gotten rid of the virus this time... After the last (Second) time it popped up saying "you have a virus", and I got that error which made the computer restart, it hasn't detected the virus' activities a third time, and both times it had detected it earlier than this...

Maybe you got rid of it.

 

[Brian Damage]

I'm sitting here with crossed fingers, which gets a bit painful after a while...

I really wonder why these poor sad people make viruses... What does it prove?

"Oh, cool, you can write a program that makes everyone hate you. Bully for you..."