ssasser worm

how can i remove ssasser worm if it is alredy in my system

Download the sasser removal tool from Symantec:
http://securityresponse.symantec.com...r/FxSasser.exe

Or McAfee's Stinger tool

Or download the symantec removal tool

http://securityresponse.symantec.com...oval.tool.html

Hi Justine 2004, and welcome to AO,

I dont know if you have/think you have sorted out your Sasser worm problem?

I would suggest that you follow the link given by kr5kernel, as it takes you to some detailed removal instructions. I would print them out for reference.

You do not say anything about your system, but I will give you a couple of tips from my experiences
:) It can be a very frustrating worm to get rid of, if you are on a network!

1. You need to clean ALL machines on the network.
2. Although it does not "work" on Win98/ME machines, it can "live" on them and infect other machines connected to the network. Clean them in safe mode.
3. Watch out for Win ME and Win XP. You need to disable the recovery system.

And this is the bit that none of the AV sites tell you:

WATCH OUT FOR LAPTOPS :eek:

If someone takes an infected laptop away and you clean the network, as soon as they come back and hook up again, you get re-infected. That can be very frustrating! If you have had an infection by something like sasser, I would recommend quarantining all portables until they have been checked and cleared.

Good luck!

WOW nihil thanks for a lovely explaination of sassar worm its working and removal mathod.
sorry my +ive points don't count as i have -ive points.... LOL.

Fellow contributors,

I have made an arbitrary decision to award points to members who I feel have "come back" and will be good for the community IF THEY SHAPE UP..................now GIVE ME TWENTY..... :D

I am not sorry, I think that the points system is a flawed but interesting idea.

I just thought that you deserved an explanation?


:)