Results 1 to 7 of 7

Thread: ssasser worm

  1. November 27th, 2004, 11:22 PM #1
    justine2004
    justine2004 is offline
    Junior Member
    Join Date
    Nov 2004
    Posts
    1

    ssasser worm

    how can i remove ssasser worm if it is alredy in my system
    Reply With Quote Reply With Quote
  2. November 27th, 2004, 11:28 PM #2
    groovicus
    groovicus is offline
    Senior Member
    Join Date
    Aug 2003
    Posts
    1,018
    Download the sasser removal tool from Symantec:
    http://securityresponse.symantec.com...r/FxSasser.exe
    HijackThis Team
    Reply With Quote Reply With Quote
  3. November 29th, 2004, 01:56 PM #3
    SirDice
    SirDice is offline
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Or McAfee's Stinger tool
    Oliver's Law:
    Experience is something you don't get until just after you need it.
    Reply With Quote Reply With Quote
  4. November 29th, 2004, 02:23 PM #4
    kr5kernel
    kr5kernel is offline
    Senior Member kr5kernel's Avatar
    Join Date
    Mar 2004
    Posts
    347
    Or download the symantec removal tool

    http://securityresponse.symantec.com...oval.tool.html
    kr5kernel
    (kr5kernel at hotmail dot com)
    Linux: Making Penguins Cool Since 1994.
    Reply With Quote Reply With Quote
  5. November 30th, 2004, 12:10 PM #5
    nihil
    nihil is offline
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    Hi Justine 2004, and welcome to AO,

    I dont know if you have/think you have sorted out your Sasser worm problem?

    I would suggest that you follow the link given by kr5kernel, as it takes you to some detailed removal instructions. I would print them out for reference.

    You do not say anything about your system, but I will give you a couple of tips from my experiences
    It can be a very frustrating worm to get rid of, if you are on a network!

    1. You need to clean ALL machines on the network.
    2. Although it does not "work" on Win98/ME machines, it can "live" on them and infect other machines connected to the network. Clean them in safe mode.
    3. Watch out for Win ME and Win XP. You need to disable the recovery system.

    And this is the bit that none of the AV sites tell you:

    WATCH OUT FOR LAPTOPS

    If someone takes an infected laptop away and you clean the network, as soon as they come back and hook up again, you get re-infected. That can be very frustrating! If you have had an infection by something like sasser, I would recommend quarantining all portables until they have been checked and cleared.

    Good luck!
    Reply With Quote Reply With Quote
  6. November 30th, 2004, 02:50 PM #6
    littlenick
    littlenick is offline
    Senior Member
    Join Date
    Oct 2004
    Posts
    122
    WOW nihil thanks for a lovely explaination of sassar worm its working and removal mathod.
    sorry my +ive points don't count as i have -ive points.... LOL.
    nobody is perfect i am nobody
    Reply With Quote Reply With Quote
  7. November 30th, 2004, 07:34 PM #7
    nihil
    nihil is offline
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    Fellow contributors,

    I have made an arbitrary decision to award points to members who I feel have "come back" and will be good for the community IF THEY SHAPE UP..................now GIVE ME TWENTY.....

    I am not sorry, I think that the points system is a flawed but interesting idea.

    I just thought that you deserved an explanation?


    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules