mctonale
My friend got a dell pc (old server running win2000) from a company that went bust. She started using it on the internet without any anti-virus.
I have managed to remove the viruses by installing AVG but can't remove adware because ad-ware, after starting scan causes isass.exe to interupt and shutdown windows.
Followed path for isass.exe (showing all hidden and protected os files) the programe doesn't exist.
Don't want to spend money on more adware to find it also doesn't work.
Can't boot from disc (don't have one).
I have managed to remove the viruses by installing AVG but can't remove adware because ad-ware, after starting scan causes isass.exe to interupt and shutdown windows.
Followed path for isass.exe (showing all hidden and protected os files) the programe doesn't exist.
Don't want to spend money on more adware to find it also doesn't work.
Can't boot from disc (don't have one).
Participate on our website and join the conversation
This topic is archived. New comments cannot be posted and votes cannot be cast.
Responses to this topic
peterh
You have the Sasser worm!!!
Use tool to remove it, and patch server up.
http://support.microsoft.com/default.aspx?scid=kb;en-us;841720
Use tool to remove it, and patch server up.
http://support.microsoft.com/default.aspx?scid=kb;en-us;841720
GlendaleSS
Yup, sounds like Sasser to me...
Man, Sasser is almst as good as the Blaster was....dang
GL!
Man, Sasser is almst as good as the Blaster was....dang
GL!
theefool
You can actually stop the shutdown process by going to Start, then Run and running shutdown -a
shutdown -a ---->stops the shutdown process.
shutdown -a ---->stops the shutdown process.
mctonale
OP
Wasn't sasser, ran fix but no infection found.
Managed to run ad-aware and removed 1500 critical items.
Ran spybot but still getting the odd pop-up and iexplore closes itself occasionally.
Managed to run ad-aware and removed 1500 critical items.
Ran spybot but still getting the odd pop-up and iexplore closes itself occasionally.
peterh
Lsass.exe is the 'Net Logon' process, a vital part of authenticating with windows. Sasser can infect this process and cause instant reboots.
Installing the MS04-11 update and the sasser removal tool will get rid of it.
http://www.microsoft.com/security/incident/sasser.mspx
I am not sure which antispyware programs work on Windows Servers but best protection is to make sure all the latest security patches are installed.
Running SUS in a commercial environment will ensire all desktops are regularly updated:
http://www.microsoft.com/windowsserversystem/sus/default.mspx
Installing the MS04-11 update and the sasser removal tool will get rid of it.
http://www.microsoft.com/security/incident/sasser.mspx
I am not sure which antispyware programs work on Windows Servers but best protection is to make sure all the latest security patches are installed.
Running SUS in a commercial environment will ensire all desktops are regularly updated:
http://www.microsoft.com/windowsserversystem/sus/default.mspx
Sampson
If you must run IE, and since it is closing down mysteriously, you probably have a number of browser helper objects attached. Download BHODemon: http://www.majorgeeks.com/download.php?det=3550 and have it help you find and get rid of them.
Start using a different browser - Opera, Firefox, Mozilla, or K-Meleon. Use IE only to update windows.
Start using a different browser - Opera, Firefox, Mozilla, or K-Meleon. Use IE only to update windows.
