W2k problem Isass.exe reboots my machine!

[status quo]

yup, mixture of ms blast and nirmada worm or what ever it was called.

http://www.cgtalk.com/showthread.php?threadid=141463

if u stick a firewall on it can't switch your computer off every 30secs which should give you a little time to try and fix the problem.

when i had it norton was useless.

have a dig around symantec website for ms blast.

there are details of a fix.

you should not be getting this if you were up to date with windows security fixes.

ultimately i had to format an start from scratch and then applying patches a fixes to gdet rid, because even with the fixes it sill came back.

suprised that people are getting this i thought it was finished last year.

[status quo]

http://security.symantec.com/sscv6/home.asp?j=1&langid=ie&venid=sym&plfid=23&pkj=IWFDRHYTINMHDKDCWLL

free on-line security check

AVG anti virus free edition is available.

---------------
http://securityresponse.symantec.com/

details of latest viruses

--------------------------
http://securityresponse.symantec.com/avcenter/tools.list.html

all the latest removal tools
--------------------------
ms blast

http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html
---------------------------
hope that helps.

edit: (firewall)

zonelab zonealarm is available for free download.

i can get u a link later if needed.

also i think msblast.exe is the blaster worm

and lsass.exe is the nimada worm

:thumbsup:

[status quo]

http://www.microsoft.com/security/incident/pctdisable.asp

edit:

full story

http://news.com.com/2100-1002_3-5203384.html?tag=nefd.top

[RobertoOrtiz]

Thanks status quo for all your help!

After a hellish weekend, my machine is finally virus free.


:thumbsup:
-R

[CGLearner]

Just as an afternote if anyone can use it:

Usually when it pops up that screen that says it is going to shut down, if you click on start, and then run, and type in "shutdown -a" it will abort the shutdown.

Works on blaster worm, etc.

[CGTalk Moderation]

This thread has been automatically closed as it remained inactive for 12 months. If you wish to continue the discussion, please create a new thread in the appropriate forum.