I was bz for this virus yesterday ..
lots of my company laptop user been affect by it , this virus was aiming on win 2k, win xp and win server 2003,
so the funny part our old server which running on win nt is ok .. our new laptop which running win xp all been affect ….
so if your computer
- cannot connect to internet
- auto restarting
- huge CPU loading but you never do anything
- some wierd funny thing happen example the “start” word dissapear on your start menu
you been affect by this virus
step by step remove it!
- ctrl + alt + del end task the process which start by axxxx.exe and skynetxxx.exe process ( where x mean any char )
- search your harddsik for *_up.* looking for all file which start by a group of number with _up.exe ex 12345_up.exe and delete it
- off the system restore
- apply the patch from Micro$oft
- download the removal tools Stinger and Sysmantec Removal Tools
- scan thru your computer by these tools
Must run thru both scanner, because some of the sasser version cannot be detect by only one scanner
More info about Sasser on Sysmantec & Microsoft
