Worm on my system

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Hi everyone,
I am struggling to take a worm out from my laptop.
It is a blasterworm-like virus, which switches the system
off everytime I am connected on ADSL (and does not appear
when I am in local).
The system shutdown message I receive sais that the
shutdown was initiated by NT AUTHORITY\SYSTEM and
that "windows must now restart because c:\WINNT\system32
\Isass.exe has status code 128".

Can anuone help?
Thanks a lot
--Salvatore

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Sounds like you've got Sasser.

http://www.microsoft.com/security/incident/sasser.mspx

Removal instructions for 2000 & XP.

--
******************************
Laura E. Hunter - MCSE, MCT, MVP
Replies to newsgroup only


"Salvatore" <Salvatore@discussions.microsoft.com> wrote in message
news:2004f01c458ff$96682950$a301280a@phx.gbl...
> Hi everyone,
> I am struggling to take a worm out from my laptop.
> It is a blasterworm-like virus, which switches the system
> off everytime I am connected on ADSL (and does not appear
> when I am in local).
> The system shutdown message I receive sais that the
> shutdown was initiated by NT AUTHORITY\SYSTEM and
> that "windows must now restart because c:\WINNT\system32
> \Isass.exe has status code 128".
>
> Can anuone help?
> Thanks a lot
> --Salvatore