Riddled with adware win2000 server.
This is a discussion about Riddled with adware win2000 server. in the Windows Software category; My friend got a dell pc (old server running win2000) from a company that went bust. She started using it on the internet without any anti-virus. I have managed to remove the viruses by installing AVG but can't remove adware because ad-ware, after starting scan causes isass.
My friend got a dell pc (old server running win2000) from a company that went bust. She started using it on the internet without any anti-virus.
I have managed to remove the viruses by installing AVG but can't remove adware because ad-ware, after starting scan causes isass.exe to interupt and shutdown windows.
Followed path for isass.exe (showing all hidden and protected os files) the programe doesn't exist.
Don't want to spend money on more adware to find it also doesn't work.
Can't boot from disc (don't have one).
I have managed to remove the viruses by installing AVG but can't remove adware because ad-ware, after starting scan causes isass.exe to interupt and shutdown windows.
Followed path for isass.exe (showing all hidden and protected os files) the programe doesn't exist.
Don't want to spend money on more adware to find it also doesn't work.
Can't boot from disc (don't have one).
Participate in our website and join the conversation
This subject has been archived. New comments and votes cannot be submitted.
Jan 27
Feb 12
0
2 minutes
Responses to this topic
You have the Sasser worm!!!
Use tool to remove it, and patch server up.
http://support.microsoft.com/default.aspx?scid=kb;en-us;841720
Use tool to remove it, and patch server up.
http://support.microsoft.com/default.aspx?scid=kb;en-us;841720
Yup, sounds like Sasser to me...
Man, Sasser is almst as good as the Blaster was....dang
GL!
Man, Sasser is almst as good as the Blaster was....dang
GL!
You can actually stop the shutdown process by going to Start, then Run and running shutdown -a
shutdown -a ---->stops the shutdown process.
shutdown -a ---->stops the shutdown process.
OP
Wasn't sasser, ran fix but no infection found.
Managed to run ad-aware and removed 1500 critical items.
Ran spybot but still getting the odd pop-up and iexplore closes itself occasionally.
Managed to run ad-aware and removed 1500 critical items.
Ran spybot but still getting the odd pop-up and iexplore closes itself occasionally.
Lsass.exe is the 'Net Logon' process, a vital part of authenticating with windows. Sasser can infect this process and cause instant reboots.
Installing the MS04-11 update and the sasser removal tool will get rid of it.
http://www.microsoft.com/security/incident/sasser.mspx
I am not sure which antispyware programs work on Windows Servers but best protection is to make sure all the latest security patches are installed.
Running SUS in a commercial environment will ensire all desktops are regularly updated:
http://www.microsoft.com/windowsserversystem/sus/default.mspx
Installing the MS04-11 update and the sasser removal tool will get rid of it.
http://www.microsoft.com/security/incident/sasser.mspx
I am not sure which antispyware programs work on Windows Servers but best protection is to make sure all the latest security patches are installed.
Running SUS in a commercial environment will ensire all desktops are regularly updated:
http://www.microsoft.com/windowsserversystem/sus/default.mspx
If you must run IE, and since it is closing down mysteriously, you probably have a number of browser helper objects attached. Download BHODemon: http://www.majorgeeks.com/download.php?det=3550 and have it help you find and get rid of them.
Start using a different browser - Opera, Firefox, Mozilla, or K-Meleon. Use IE only to update windows.
Start using a different browser - Opera, Firefox, Mozilla, or K-Meleon. Use IE only to update windows.
