sasser worm

[Vicki Keister]

I have the sasser worm and can't get into my desktop to
fix it like the microsoft.com website instructs. I used to
be able to get to the desktop for about 60 seconds before
it would shut off and restart but I ran the AVG rescue
disk and since then I haven't been able to even get to the
desktop anymore. My friend has Windows XP like me so I
created the rescue disk on hers and can boot up using the
disk and it has "A:" prompt but I don't know enough about
that kind of language to make it work and I want to save
my files too. Is there a way to remove the worm and save
my files using this ms dos type of language? Thanks, Vicki

 

[Michael Solomon \(MS-MVP Windows Shell/User\)]

That's a bootable floppy, not a rescue disk and is useless to you unless the
file system XP is using on your setup is FAT32. Since XP is installed using
NTFS by default, it is unlikely your system is using FAT32.

Be that as it may, try following the instructions you have from Safe Mode
assuming you can access it. Boot the system, start tapping F8, when the
menu appears, select Safe Mode and press enter.

 

[Guest]

Thanks so much for your quick reply. I have tried the safe mode and I tried to restart
in safe mode, but when it tries, it lists all the current
drivers, freezes for a moment, then restarts again. I have tried all of the offered modes and none will let me get to the desktop. You had suggested a "repair install" for someone else. Would that work for me? I cannot access the safe mode. Do you have any other suggestions? Is there no way to access ms dos to make any corrections? Thanks so much, Vicki

 

[Michael Solomon \(MS-MVP Windows Shell/User\)]

It might get you back to the desktop but if it does, do not assume you are
free of the worm. Assuming it does allow you to boot to the desktop again,
then follow the necessary procedures to rid your system of it. If you are
unable to do it with AVG, try the Symantec website, www.symantec.com for a
Sasser removal tool.

The procedure for a repair install is as follows:

NOTE, while a repair install should leave your data files intact, if
something goes wrong during the repair install, you may be forced to start
over and do a clean install of XP. If you don't have your data backed up,
you would lose your data should that eventuality occur.

Assuming your system is set to boot from the CD-ROM drive and you have an
actual XP CD as opposed to a recovery CD, boot with the XP
CD in the drive and perform a repair install as outlined below. If the
system isn't set to boot from the CD or you are not sure, you need to enter
the system's BIOS. When you boot the system, the first screen usually has
instructions that if you wish to enter set press a specific key, when you
see that, do so. Then you will have to navigate to the boot sequence, if
the CD-ROM drive is not first line, set it first in the boot sequence. Save
your settings and exit with the XP CD in the drive. The system will reboot.

When the system boots, a few screens into the process you may see a message
instructing you
to hit any key in order to boot from the CD along with a countdown. When
you see this be sure to
hit a key on the keyboard, if you miss this instruction and the system fails
to boot from the CD, it's too
late, you'll need to reboot and try again.

Once you have pressed a key, setup should begin. You will see a reference
asking if you need to load special drivers and another notice that if you
wish to begin the ASR (Automatic Recovery Console) depress F2. Just let
setup run past all of that. It will continue to load files and drivers.

Then it will bring you to a screen. Eventually, you will come to a screen
with the option to (1) setup Windows or (2) Repair Windows Installation
using the Recovery console. ***The selection you want at this screen is
"Setup Windows,"