Got hit by Sasser

[Elie]

and it'a pissing me off, I can't install any patches because the CPU utilization hits 100% on this slow antiquated PC and services.exe is shutting it down.

How do I stop it from initially restarting so I can install the patches?

Thanks,
Elie

[Nowhere]

I believe "shutdown -h" in run/commandline did tre trick. (would have to also google to make sure...)

[Elie]

Thanks, did some more digging, turns out that this is more serious than I thought!

What's shuttuing my system down is services.exe caused by a backdoor trojan, so I have a few files to fix this, I will try and let everyone know how it got fixed.

[Elie]

Update: A system restore to a previous time (three weeks ago) actually worked, was able to install SP2 which fixed the problem permanently.

Regards,
Elie

[Gurm]

and it'a pissing me off, I can't install any patches because the CPU utilization hits 100% on this slow antiquated PC and services.exe is shutting it down.

How do I stop it from initially restarting so I can install the patches?

Thanks,
Elie

WHAT? Is this 2003?

[Technoid]

he must be forgetting the golden rule of never plugging a box directly out to the net

[Gurm]

he must be forgetting the golden rule of never plugging a box directly out to the net

Why would someone do that? Uhh... no, seriously?

(Don't worry Elie, just giving you a hard time.)

No, SERIOUSLY?

[Evildead666]

I believe "shutdown -h" in run/commandline did tre trick. (would have to also google to make sure...)

Heh, its always been, for me :
Start -> Run -> shutdown -a

that stops the timer, and closes it down.
There is a patch from Microsoft to close the hole that sasser uses i think...

I have used it mostly on french machines, but i don't think the command line interface is affected...could be wrong

Edit : A week or so ago, i let one of my machines onto the net with no Av and no firewall. I used uTorrent twice on it previously, but not at that time.
3 seconds. Thats when a wierd .exe file with random name appeared, and my outbound connection went haywire...3 seconds...