Sasser worm: Help needed

  • Donna
  • Newbie
  • Newbie
  • Donna
  • Posts: 9

Post 3+ Months Ago

I understand that in WinXP typing 'shutdown-a' in Run will stop the sasser worm shutdown process.

Is there some way in Win 2000 that I can stop the shutdown so that I have time to download worm removal (and other) tools?

Any assistance greatly appreciated. Thanks!
  • SecureITGroup
  • Proficient
  • Proficient
  • User avatar
  • Posts: 293

Post 3+ Months Ago

it's
shutdown -a
not
shutdown-a

it has a space that may be your problem
try that but ill ask for window 2000 if shutdown -a is a valid command. It should be.
  • JrzyCrim
  • Mastermind
  • Mastermind
  • User avatar
  • Posts: 2062

Post 3+ Months Ago

http://www.microsoft.com/technet/Securi ... asser.mspx

Quote:
If your computer is vulnerable to the worm, the worm may cause LSASS.EXE to crash which will force the operating system to shutdown after 60 seconds. This shutdown can be aborted on Windows XP systems by using the built-in “shutdown.exe -a” command. This shutdown can NOT be aborted on Windows 2000 systems.


There are instructions following this remark on how to stop sasser from crashing lsass.exe.
  • Donna
  • Newbie
  • Newbie
  • Donna
  • Posts: 9

Post 3+ Months Ago

Thanks for responding. Actually I used it correctly (without a space), but it dídn't work. I then read that the command only works for WinXP, not Win2000. But if you can find anything re Win2000 I'd be grateful.
Thanks!
Donna
  • SecureITGroup
  • Proficient
  • Proficient
  • User avatar
  • Posts: 293

Post 3+ Months Ago

Ahh i see JrzyCrim
now i knwo i was'nt sure if it would work in 200 that is why i did not give a direct answer.
  • Donna
  • Newbie
  • Newbie
  • Donna
  • Posts: 9

Post 3+ Months Ago

Jim, thanks for the link. I'll try out one of those techniques when I get home from work.

Post Information

  • Total Posts in this topic: 6 posts
  • Users browsing this forum: No registered users and 26 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
cron
 

© 1998-2014. Ozzu® is a registered trademark of Unmelted, LLC.