Rave Radio: Offline (0/0)
Email: Password:
Page: 1Rating: Unrated [0]
Avserve / W32.sasser Worm
Good [+1]Toggle ReplyLink» nothingnopenope replied on Mon May 3, 2004 @ 12:56pm
nothingnopenope
Coolness: 201915
I had disabled my firewall for about 10 minutes because it was causing a problem with a program, and I hadn't visited windowsupdate in the last couple of weeks (oops) and this nasty little bastard of a worm hit me. Norton obviously wasn't fast enough to update their software to catch this one either.

Onset was similar to the worms that exploited a fault in the RPC subsystem of windows, with a system shutdown in 60 seconds warning.

When the computer restarted, it was ass slow, and the shutdown error would return if I connected online. Fortunately, whoever wrote this worm was a bad coder, as it showed up in the task list. I closed the suspicious (avserve2.exe) which was randomly starting and shutting down programs in the background and eating up ram faster than an American eats fast food. I removed all registry references and avserve2.exe from the windows folder, and everything was back to normal. I quickly patched windows and did some extra scans to make sure this little bastard or anything else wasn't still hiding on my system... Norton was recently updated and it removed all the other junk files this worm shat all over the computer. (random number xxxx_.exe)

Anyway if anybody who is not good with computers suddenly finds their system ass slow and giving you restard errors I can help you get rid of this problem...

Anyway that's the last time I ever disable the firewall, I got this by being online for 10 minutes with it turned off.
Good [+1]Toggle ReplyLink» neoform replied on Mon May 3, 2004 @ 1:02pm
neoform
Coolness: 340355
anti virus software is for chumps.
Good [+1]Toggle ReplyLink» nothingnopenope replied on Mon May 3, 2004 @ 1:06pm
nothingnopenope
Coolness: 201915
Yeah, in this case.. Good thing I was able to get rid of it myself before norton got off their asses and updated their program
Good [+1]Toggle ReplyLink» neoform replied on Mon May 3, 2004 @ 1:11pm
neoform
Coolness: 340355
a firewall and knowledge of the comp you're using is enough to stop a virus.
Good [+1]Toggle ReplyLink» nothingnopenope replied on Mon May 3, 2004 @ 1:12pm
nothingnopenope
Coolness: 201915
Yeah, but when you have 2 other people using your computer you have to be extra careful...
Avserve / W32.sasser Worm
Page: 1
Post A Reply
You must be logged in to post a reply.