Back
The Sasser virus comes into your computer through a back door that
Microsoft announced April 13, 2004. The Sasser will (among
other things) shut your computer down while you are on the
Internet.
If you are infected with this virus do the following:
1. End process on the virus.
--Press Ctrl+Alt+Delete once.
--Click Task Manager.
--Click the Processes tab.
--Double-click the Image Name column header to alphabetically sort
the processes.
--Scroll through the list and look for the following processes:
- avserve2.exe
- any process with a name consisting of four or five digits,
followed by _up.exe (for example, 74354_up.exe).
--If you find any such process, click it, and then click End
Process.
--Exit the Task Manager.
2. Remove the virus using the Symantec removal tool.
You can download it by clicking the picture below:

Attention Windows XP users! Before running the removal tool
you must disable system restore. To get directions for doing
this click here:
3. Download and install the Microsoft Patch for this
virus. You MUST do this step or you will get the virus
again! When you click on the appropriate link below you will
be taken to a Microsoft site. All you need to do is click
the "Download" button located on the right hand side of
the screen.
|