zike skrev:
Kör > shutdown -a Så slipper du iaf förhoppningsvis att den stänger av sig..
Tack men det funkar inte på Win 2000... Nåja, rätt åt mig för att jag inte hade firewallen igång. Har fixat hem Norton och ska scanna igenom nu. Slår jag av Firewallen så stänger burken ner efter 60 sekunder fortfarande. Symptomen stämmer med "Sasser worm" som det flaggas för på Microsoft.com men inget i "Mitigation Steps for Affected Computers" nedan stämmer på min burk. Hoppas Norton hugger på nåt annat.
Från Microsoft:
*****************************************************
How to Tell If Your Computer Is Infected
If your computer is infected with W32.Sasser.worm, you may see a dialog box with text that refers to LSASS.exe. Some customers whose computers have been infected may not notice the presence of the worm at all, while others who are not infected may experience problems because the worm is attempting to attack their computer. Typical symptoms may include systems rebooting every few minutes without user input.
Mitigation Steps for Affected Computers
If your computer is infected with the W32.Sasser.worm, please do the following:
Enable the Windows XP Internet Connection Firewall or a third-party firewall on the affected computer.
Disconnect the computer from the Internet.
Restart the computer. If you have problems rebooting, reboot in safe mode.
Press CTRL+ALT+DEL.
Click the Task Manager.
Click the Processes tab.
Press and hold the CTRL key and then click C:\WINDOWS\avserve.exe and c:\WINDOWS\system32\*_up.exe.
Click the End Task button.
Click Start.
Click Search and then search for and delete the following files:
C:\WINDOWS\avserve.exe
C:\WINDOWS\system32\*_up.exe
Click Start again, click Run, and then type: regedit32
Click OK.
In Registry Editor, locate and delete the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "avserve.exe" = C:\WINDOWS\avserve.exe
Connect the computer to the Internet.
Go to the Windows Update site, and click the Scan for Updates button.
Download and install the critical updates recommended after the scan.
