View Single Post
Eski 23-05-04, 04:04
MiRaBiLiS MiRaBiLiS çevrimdışı
Varsayılan Cvp: ProbLem : Nete bağlandığımda, 20 tane lsass.exe dos penceresi, veya run.dll siliniyor

SASSER VIRUS INFO - lsass.exe terminates with an error code

In case its the virus wich i'm 90% sure
this is what you should do

Open Windows Task Manager.
On Windows 95/98/ME systems, press
CTRL+ALT+DELETE
On Windows NT/2000/XP systems, press
CTRL+SHIFT+ESC, then click the Processes tab.
In the list of running programs*, locate the malware file(s) detected earlier.
Select one of the detected files, then press either the End Task or the End Process button, depending on the version of Windows on your system.
Do the same for all detected malware files in the list of running processes.
To check if the malware process has been terminated, close Task Manager, and then open it again.
Close Task Manager.
Removing Autostart Entries from the Registry

Removing autostart entries from the registry prevents the malware from executing during startup.

Open Registry Editor. To do this, click Start>Run, type Regedit, then press Enter.
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>
Windows>CurrentVersion>Run
In the right panel, locate and delete the entry or entries:
avserve.exe = %Windows%\avserve.exe
Close Registry Editor.
(taken from Trendmicro website)

Symantec has a removal tool for W32.Sasser.Worm and W32.SasserB.Worm and can be found here along with instructions:

http://securityresponse.symantec.com...oval.tool.html

More information about SasserB can be found here:
http://securityresponse.symantec.com...er.b.worm.html

And about Sasser here:
http://securityresponse.symantec.com...sser.worm.html

You do not have to have Norton or Symantec AV protection to use the tool.


Bu bilgileri anlarsınız Sanırım Bunlar Size Yardımcı Olacaktır...
  Alıntı Yaparak CevaplaAlıntı Yaparak Cevapla