Sunday, 2nd May 2004Sunday, 2nd May 2004 Home » Blog » W32.Sasser.worm
W32.Sasser.worm
Posted by Lester Chan at 03:20 in Virus
  • 10 Responses
  • 1,776 views

A few of my friends had already been infected by this virus. It is a very wide spread virus. The patch had already been released weeks ago. If you got infected, you deserved it. For god’s sake, be a responsible user and keep your Windows up to date.

How to Tell If Your Computer Is Infected
If your computer is infected with W32.Sasser.worm, you may see a dialog box with text that refers to LSASS.exe. Some customers whose computers have been infected may not notice the presence of the worm at all, while others who are not infected may experience problems because the worm is attempting to attack their computer. Typical symptoms may include systems rebooting every few minutes without user input.

For more information on this virus and how to remove/prevent it, visit this Microsoft site.

To have enough time to do so, you need to disable the shutdown of Windows by any application. Go to Run, type “shutdown -a” without the quotes.


SocialSocial

CommentsComments
  • http://www.freewebs.com/fantasiadreams sleepy

    well~ well~ up-to-date info…

  • http://simonlim.sianzation.org xtreme funktions

    omg … i’m infected .. what a lousy user i am ..

  • http://simonlim.sianzation.org xtreme funktions

    oh .. i didn’t kena the worm .. but how come i still see the lsass.exe .. strange .. got to delete it off ..

  • http://www.lesterchan.net GaMerZ

    keep your windows up to date always.

  • http://www.geocities.com/syazali7/ The Source

    Hmm…. it seems I’m not infected.
    And there seems to be no critical update for me in Microsoft Windows Update. That’s strange. Who updated it for me?

    And how come there’s still lsass.exe in my task manager?

  • http://www.lesterchan.net GaMerZ

    that is the normal process.

    Windows will auto update if you enable it.

  • trav

    don’t worry if you see it in task manager… lsass is a valid windows system process… i think it’s called ‘local security authority service’ or smth… oh lester :) i didn’t understand what u meant by ‘normal process’ until i finished this comment :p

  • http://www.lesterchan.net GaMerZ

    LOL, ops my bad, didn’t explain clearly.

  • keroro

    lucky i manage to update successfully at that time. was having problems with the updates then. if not, i think i sure kanna this virus. pity cs, he can’t even use the internet when kanna by the virus

  • http://www.lesterchan.net GaMerZ

    yap, I think you need to dl the patch and pass him in a disk.