Get the April 13th patch on a clean machine and burn to CDR along with one of the removal tools (Symantec or Mcafee)...turn off the Internet connection or broadband to infected machines...then apply patch from CDR. Then you can run the removal tool.
Thanks alot for your help Russ. This comp has a bunk disc burner, so I'll swing by my buddies house tomorrow and put all the goodies onto a CDR. I appreciate your help once again.
As you said, it worked like a charm. The McAfee stinger found the Sasser worm. I then ran spyware and found a few other things. Would there still be a point in running HJT, or will these additions along with an updated Windows and such pretty much clean it out? Thanks again for your help.
Texruss
3.4K Posts
0
May 2nd, 2004 07:00
You probably need worm repair before we get to any HJT logs. See here:
http://www.russelltexas.com/antivirus/may12004worms.htm
Get the April 13th patch on a clean machine and burn to CDR along with one of the removal tools (Symantec or Mcafee)...turn off the Internet connection or broadband to infected machines...then apply patch from CDR. Then you can run the removal tool.
Plug back onto the Internet
Update AV and run a full system scan.
Post back if that doesn't work.
Texruss
UofM
11 Posts
0
May 2nd, 2004 07:00
Texruss
3.4K Posts
0
May 2nd, 2004 07:00
No problem...glad I could help. I imagine I'll have a busy Monday when all this hits the fan.
Texruss
UofM
11 Posts
0
May 3rd, 2004 04:00
Texruss
3.4K Posts
0
May 3rd, 2004 14:00
>Would there still be a point in running HJT,
Hold off for a few days unless you have some problems...we have a lot of posts asking for help here at the Forum.
Texruss