1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Active Blaster worm/sasser worm infection applications wont start

Discussion in 'Malware and Virus Removal Archive' started by jameseverett, 2009/08/29.

  1. 2009/08/29
    jameseverett

    jameseverett Inactive Thread Starter

    Joined:
    2009/08/29
    Messages:
    13
    Likes Received:
    0
    [Active] Blaster worm/sasser worm infection applications wont start

    Hi, I sure hope someone can help me. :) Well here's the problem; my computer got infected with a combination of the blaster worm combined with the sasser worm:eek: and these two are taking turns shutting down my system. Worst of all my computer is running so slow that I dont even have time to hit the start button to select the run option to effect a shutdown abort becuause the virus shuts down my computer before the tsak bar can load. :mad:So I've been re-booting in safe-mode with the ctrl-alt-del option to bring up the task manager and type in cmd for the command prompt and began executing a "SHUTDOWN -A" abort from there, :eek: problem is i cant get any programs to load. Only thing that seems to work is the task manager. I can go into files but they load real slow. programs wont load at all. whent into somthing call regedit but didnt know what to look for, went into the c:/ drive but dont know what to look for in there either. CPU usage is at 100 percent; tried running a scan on the registry but each line searched took almost 10 to 15 minutes. Any thoughts, please help. Oh yeh, i dont have a os disk for this system.
     
    Last edited: 2009/08/29
    jameseverett,
    #1
  2. 2009/08/29
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Using another working computer...
    1. Download the Avira AntiVir Rescue System: http://www.free-av.com/en/tools/12/avira_antivir_rescue_system.html
    2. Place a blank CD in your burner and double-click on the downloaded file.
    3. The program will automatically burn the CD for you.
    4. Place the burned CD into the affected computer and start the computer with the CD in the CD tray.
    5. On the bottom left side of the screen there are 2 flags. Using your mouse click on the British flag to use English.
    6. Click on the Configuration button.

    - Select Scan all files
    - Select Try to repair infected files and Rename files, if they cannot be removed
    - Select Scan for dialers
    - Select Scan for joke programs (Jokes)
    - Select Scan for games
    - Select Scan for spyware (SPR)

    7. Click on Virus scanner
    8. Click on Start scanner at the bottom of the screen.

    9. Let Avira finish it's scan and then remove any threats found and then exit out of the scanner.
    10. Take the CD out of the CD/DVD tray and then restart the computer.

    If needed see this Tutorial for the Avira Rescue CD: http://forum.avira.com/wbb/index.php?page=Thread&threadID=82163
     
    broni,
    #2


  3. to hide this advert.

  4. 2009/08/30
    jameseverett

    jameseverett Inactive Thread Starter

    Joined:
    2009/08/29
    Messages:
    13
    Likes Received:
    0
    Thanks i will try this as soon as i get to a computer that works right now im working from a linux cd os through my cd player. it works ok but it runs on fire fox and every time i go to download something to fix this computer the download keeps reading application needed to open this link so......... i dont know, but im not giving up. One thing good about all of this is im sure learning alot about pc's. Thanks will post back latter.
     
    jameseverett,
    #3
  5. 2009/08/30
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    No problem :)
     
    broni,
    #4
  6. 2009/08/31
    jameseverett

    jameseverett Inactive Thread Starter

    Joined:
    2009/08/29
    Messages:
    13
    Likes Received:
    0
    Hey broni, I sure hope you get this thread... I downloaded that rescue cd you recomended and i did the scan. It seemed to be going well then at the end of the scan I did not see a remove option in-order to remove the threats it found. Did i miss something?
     
    jameseverett,
    #5
  7. 2009/08/31
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    No. Avira actually doesn't remove anything. If any bad file is found, Avira automatically renames it.
    Any improvement in computer's behavior?
     
    broni,
    #6
  8. 2009/08/31
    jameseverett

    jameseverett Inactive Thread Starter

    Joined:
    2009/08/29
    Messages:
    13
    Likes Received:
    0
    Hi broni

    Nope computer is still sick,:mad: you know this virus has been in there almost three weeks now,Im wondering if the files are past recovery. I dont have a xp pro to reformat or reinstall with any ideas? OH and btw i joined your site today:D didnt know how to chat though :eek:wanted to say hey......... i signed in jameseverett59 so look for me ok.:)
     
    jameseverett,
    #7
  9. 2009/08/31
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Yeah, I've noticed, you signed up at my site :)

    Unfortunately, I'm not sure what we can do here, since the computer is not operable.
    You can try to repost your problem at Windows section.
    When it's operable, you can return here.
     
    broni,
    #8

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...