Sasser and Norton

[Guest]

My friend has the sasser virus and he bought norton systemworks pro and installed it, now he can't reboot xp in neither regular or safe mode. It says something like Sorry for the inconvenience but windows cannot restart blah blah blah.. What can he do?

 

[Ted Turner]

He can fly to germany and strangle the little prick who designed the virus.

My friend has the sasser virus and he bought norton systemworks pro and

installed it, now he can't reboot xp in neither regular or safe mode. It
says something like Sorry for the inconvenience but windows cannot restart
blah blah blah.. What can he do?

 

[*Vanguard*]

dncdietz said in

My friend has the sasser virus and he bought norton systemworks pro
and installed it, now he can't reboot xp in neither regular or safe
mode. It says something like Sorry for the inconvenience but windows
cannot restart blah blah blah.. What can he do?

I haven't investigated the Sasser crap. Can he reboot into Safe mode (with
networking)? If so, maybe he can navigate to Symantec to use their online
virus checker (but that won't help with removing the crap). He could then
look up the info page on Sasser
(http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.f.worm.h
tml) to see how to manually eradicate the farker. Or you could be a real
friend and visit there to print out the instructions. If he cannot boot
into Safe mode, how about installing the Recovery Console and see if he can
manage to boot into that? Maybe he can delete the file in that mode so on
full boot it won't be around to load (and then do the registry cleanup).

 

[Ron Martell]

My friend has the sasser virus and he bought norton systemworks pro and installed it, now he can't reboot xp in neither regular or safe mode. It says something like Sorry for the inconvenience but windows cannot restart blah blah blah.. What can he do?

There is no known instance of any error message produced by Windows
that contains the phrase "blah blah blah".

When seeking advice or assistance regarding an error it is essential
to provide the complete *verbatim* text of the error message(s)
including all of the parameter values. Othewise any attempts to
resolve the issue will likely be only guesswork.

If he has a Windows XP Installation CD (as distinguished from the
"system recovery" disks provided by many computer manufacturers) then
he may have to do a Repair Install as per the instructions at
http://michaelstevenstech.com/XPrepairinstall.htm

And if he does manage to get the system running then he should remove
the Sasser virus before trying to install new software. Use Stinger
(free) from http://vil/nai/com/vil/stinger - it is small enough to fit
onto a 3.5 inch diskette and does not require any installation. Just
double click on the file to launch it and click on the Scan button.

Good luck


Ron Martell Duncan B.C. Canada
--
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca

"The reason computer chips are so small is computers don't eat much."

 

[NoNoBadDog!]

Norton offered the option to scan prior to installation and you chose not
to...so who is to blame?

Bobby

 

[Kenny M]

That may be just your assumption. There is a lead time for the manufacture
and distribution of retail packs. When I bought NIS 2004 in January, I found
(to my annoyance) that it had been manufactured at least 4 months prior. If
the OP encountered the same situation, then Sasser wouldn't have been in the
pre-install scan definitions.

 

[NoNoBadDog!]

True, but the true vector update will work in the pre-scan, and will update
signatures on a temp file, so he would have been using the most recent
available signature file...assuming he still had a functioning internet
connection.

Bobby

 

[Kenny M]

Thanks, I learn a little more every day.

True, but the true vector update will work in the pre-scan, and will
update signatures on a temp file, so he would have been using the
most recent available signature file...assuming he still had a
functioning internet connection.

Bobby