I got this virus 2 days ago and its just like the one last year that keeps rebooting your comp. The funny thing is I didn't get this from an email but actually got it from going to the Microsoft website. XP and these security flaws are really really starting to piss me off...I tried doing all the instructions on the website by trying to find the files in my regedit and also my process commands by control alt del but I didn't see the files that mircosoft said was infecting my comp. Then I try to clean my PC from the microsoft website and its says virus not found. But I still keep getting "30 seconds or 50 seconds to shutdown". I'm downloading another update now so hopefully this will work. I'm thinking I have another variant or something....I just need 5 minutes in a locked room with this person who spread the virus.....I'm behind in my research this weekend because of this damn worm...Oh well just had to let it out. I do have anti virus but didnt detect it. Anyone else having probs?

 

MS updates aren't designed to remove viruses, but there are tools for removing certain worms. I would be very, very surprised if you actually got a worm or virus from a MS update. You either have a worm/virus, or some other pc on your network is sending commands to your pc that cause it to shutdown, in which case the problem isn't going to be found on your pc, but you can prevent your pc from being affected by following MS directions, i.e. enabling the firewall.

Go here if you think you have problems with the blaster worm:
http://www.microsoft.com/security/incident/blast.asp

See this page if you think you have problems with the Sasser worm:
http://www.microsoft.com/security/incident/sasser.asp

Be aware that you may not have that specific worm, there are many worms, but updated anti-virus scanners should be able to clean your system, if that is where the problem lies. Most virus scanner makers regularly update their definition files, and these must be downloaded to your PC to provide up-to-date protection.

 

Look in msconfig on the startup tab. If you see avserv1, avserv2 or avserve.exe, than you have the Sasser worm.

You can remove it from start up but you still have to update all your virus software and you may still have to remove it yourself manually. If no one else does, I will post the reg key that it creates tomorrow.....

 

yeh so far, all is good. After d/l a bunch of updates and detection software from the site no more restarting your comp messages. Hey Jlnagton where is the "msconfig" at on the startup tab? I was looking for avserv files by pressing ctrl alt del and looking it in the process and also my regedit. This is supposedly one of the fasest spreading viruses since this weekend was considered a holiday for some reason across the wolrd. Allready its in millions, and tommorow the start of the work week it will be worse according to experts when businesses start opening up. Why do people make viruses.....They should really lock them up beat them then fine the hell out of them or something.
Its just scary how by going to a website such as microsoft I got the virus. I wasn't even in my email or d/l anything. I read a story about the worm on the AP news then went to microsoft for an update so I don't get it and next thing I know it says LSass error.....WTF lol.

 

oops, sorry.....

You want to click "start", go to "run" and type "msconfig" in the run line. Press ok and the microsoft system configuration utility will come up. There are 5 tabs there and the furthest one to the right is "startup"
This is where you can edit what programs load when the computer start booting. You often can find spyware listed in there and usually a lot of programs that don't need to load when the system starts. For example many will find ms office listed in there, this is a program that you don't need to start with the system, all it does is slow down the booting up process and eat up system resources. Uncheck it so it doesn't load on startup, this program will open when you need it to just like always when you click on it, rather than running in the backround using up your memory.....sorry, got a little winded there lol.

 

thanks man! I saw like 5 items in there, ranging from microsoft office, to calender to adobe etc I didn't need. My startups do take awhile sometimes.