Sasser.B question - Free Antivirus Forum

Sasser.B question

BullGuard Antivirus Forum > Virus > Alerts & New Threats > Sasser.B question

Forum Quick Jump

[ << Previous Thread | Next Thread >> ]

jruggs
New Member

Date Joined May 2004
Total Posts : 1

Posted 5-6-2004 3:29 (GMT +1)

So... My name is Jason, and I have Sasser.B confused

Here's the thing. Symaantec keeps quarantining files but is unable to clean them. So I installed microsofts security update (a day late and a dollar short) and also updated my virus definitions. However, when Norton Antivirus does a scan, it does not find the worm. Yet every morning when I return to my computer, I have another popup window from Norton saying that a file infected with the worm as been found and quarantined.

It gets worse...

I run the little tool Microsoft has on their site to search my machine for the worm, it reports that my machine is clean. So I run the Symantec FxSasser.exe removal tool, which also reports that I'm clean.

What gives? I have noticed degraded network performance, so [i]something[/i] is going on...

Can anyone help?

Destroyer
Trusted Member

Date Joined Mar 2004
Total Posts : 245

Posted 5-6-2004 6:41 (GMT +1)

Try Bullguards sasser removal tool

Dedeyes
New Member

Date Joined May 2004
Total Posts : 12

Posted 5-6-2004 9:32 (GMT +1)

I had the same problem even after trying several removal tools and ended up formatting .

I found out later that the reason the tools find nothing is that your virus protection is on .
Disable it and then run the removal tools and hopefully they will trash that worm .

Reply if it works we need all the info we can get on this .

rusty
New Member

Date Joined May 2004
Total Posts : 7

Posted 5-12-2004 7:24 (GMT +1)

yes that is exactly right......all of your protection has to be disabled when you run the removal tool or it will be unsuccessful. Then reboot and run the removal tool once again with all protection off to complete the removal process.

vikana
New Member

Date Joined May 2004
Total Posts : 7

Posted 5-15-2004 12:21 (GMT +1)

go to msconfig and use selective start-up

go to boot.ini tab and put a tick in safe boot

go to start tab and take out unnessary start-up items including avserve and skynet

reboot into administrator and use sasser tool

Reboot as yourself and run virus checker

go back to msconfig and take out tick in boot.ini

get update asap

Vikana

vikana
New Member

Date Joined May 2004
Total Posts : 7

Posted 5-15-2004 12:23 (GMT +1)

p.s.

Don't forget to disable system restore to remove any restore points, sometimes viruses hide there.

Hope it helps

Vikana

Renee
New Member

Date Joined Jun 2004
Total Posts : 4

Posted 7-1-2004 8:08 (GMT +1)

I had the same virus. I have Freedom Security for a virus protection and it found the virus and deleted it with a regular scan.
www.Freedom.net
really good program

Forum Information

Currently it is Saturday, November 21, 2009 1:08 AM (GMT +1)
There are a total of 73.021 posts in 17.116 threads.
In the last 3 days there were 15 new threads and 72 reply posts. View Active Threads

Who's Online

This forum has 30330 registered members. Please welcome our newest member, DarkPrincess.
24 Guest(s), 0 Registered Member(s) are currently online. Details

5 Latest Threads

How to remove VBS:Malware-gen virus??? (4)	20-11-2009 22:26:03 (DarkPrincess)
Unable to start COM+ Event, BITs and Windows Update on Win2000 (13)	20-11-2009 22:10:54 (sjrsquared)
Generic.Malware.SY.54561FF3 (0)	20-11-2009 20:40:33 (DanLasko)
Www.clothinglookout.com paypal mihcael jackson t-shirts replica nike acg boots cole haan fendi shoes (0)	20-11-2009 20:13:00 (clothinglookout)
Fashon juciy couture tracks!!!! gucci jackets replica timberland men boots nike air max 2009 monste (0)	20-11-2009 20:08:16 (clothinglookout)

Need Support? Write to:

| Forum Help Manual

Download free trial version of Bullguard