sasser?

[pmicka]

I recently found that i had the sasser worm, i downloaded
the update from windows update, and the removal tool.

1) whenever i use the worm removal tool it says my comp.
isn't infected, but in the task manager window it still
there, why is this?

2)Ever since, i havn't been able to perform the "disk
cleanup" at all. It starts, progresses about 2-4 blocks in
the bar and then nothing. Any suggestions?

 

[Robert Moir]

I recently found that i had the sasser worm, i downloaded
the update from windows update, and the removal tool.

1) whenever i use the worm removal tool it says my comp.
isn't infected, but in the task manager window it still
there, why is this?

What, exactly, does the task manager window say is still there?

 

[Steven L Umbach]

If you have one worm, you may have more and or other malwares. Do a scan of
your computer with programs that can target more than one worm also. Try to
scan your computer with the free AdAware and Sysclean from Trend Micro. Be
sure to update the definitions before running Adaware and download Sysclean
and the pattern file to the same folder to run. See the link from Microsoft
on how to protect your computer from internet threats by using antivirus
program, using a firewall, and keeping current with Critical Updates from
Windows Updates. --- Steve

http://www.download.com/3000-2094-10045910.html?legacy=cnet -- AdAware
http://www.trendmicro.com/download/dcs.asp
http://www.trendmicro.com/download/pattern.asp
http://www.microsoft.com/athome/security/protect/default.aspx -- Microsoft
security tips.

 

[pmicka]

since i discovered i had the worm and downloaded the
windows update for it i have also installed Norton
Antivirus and Personal Firewall and updated all of the
definitions etc. Should i still get the freeware you
recomended?

and the process that is still showing in the task manager
is LSASS.EXE but it only has 6 sec of runtaime

also what is the "system idle process"

 

[Steven L Umbach]

Lsass.exe is a legitimate process and I would not worry about it if your
computer is running fine and your programs report it is clean. System idle
process is basically a measurement of available CPU. It normally has a high
number. I would still run at least AdAware as it will check for parasites
that anti virus programs may not normally check. It would not hurt to run
SysClean. You do not need to install it. It runs as a stand alone
application. It is a great tool for scanning for and removing many common
malwares instead of being a full featured antivirus program. It is not
unusual for a computer user to need to use more than one product to detect
and remove an infection. --- Steve

 

[Guest]

As a rule of thumb i run my spyware with a quick scan daily or every few days.
Lavasoft Adaware special edition is very good. Spybot search and destroy is
another good free product.

I also use a product called Spyware Doctor which I like. it isn't free but
it is reasonable. The same people who make tweak manager and registry mechanic
make spyware doctor.

As steven and Robert mentioned make sure you do updates whenever you use the
tools and it is becoming the norm to run at least one malware program besides
an anti virus for protection.

Malware can do a lot of damage.


The yahoo toolbar offers a scanning tool which runs on pest patrol backbone.