If you use Microsoft Windows XP or Windows XP Service Pack 1 (SP1) and your computer has been infected with the Sasser worm, you can follow the steps below to change your software, remove the worm, and provide protection from subsequent attacks.
Step 1: Disconnect your computer to the Internet
To prevent further problems, drop out of Internet connection your computer:
For Broadband Internet Connection Users Find the cable that connects the computer to a modem or a cable that connects the computer to the modem or the telephone connection. Freelance cord from the modem or the phone line, so that your computer into an Internet connection is lost.
Dial-up connection users: Find the cable that connects the internal modem in your computer to a telephone connection, then unplug it to keep your computer connects to the Internet.
Step 2: Stop the Shut down Cycle
This worm will cause the file lsass.exe not react to other commands (stop responding), which then causes the operating system shut down again after 60 seconds. If you begin to shut down your computer, follow these steps for the system did not experience a shut down.
This worm will cause the file lsass.exe not react to other commands (stop responding), which then causes the operating system shut down again after 60 seconds. If you begin to shut down your computer, follow these steps for the system did not experience a shut down.
On the taskbar below your computer screen, click Start, then click Run.
Enter: Cmd and then click OK.
At the command prompt, type: shut down.exe-a and then press ENTER button.
Step 3: Perform Prevention
You can periodically remove all signs of the worm infects your computer by creating a log file.
Enter: Cmd and then click OK.
At the command prompt, type: shut down.exe-a and then press ENTER button.
Step 3: Perform Prevention
You can periodically remove all signs of the worm infects your computer by creating a log file.