NT AUTHORITY\SYSTEM

  trevpearson 10:49 13 Aug 05
Locked

The above is popping up on my computer and closing it down.

I know it's the Sasser worm (or a variant) but AVG doesn't find it, neither does Trend Housecall or the Symantec Worm removal tool.

Any help would be appreciated.

  VoG II 10:57 13 Aug 05

Start, Run, type

shutdown -a

and click OK.

That should prevent it from shutting down.

Then run Stinger click here

  trevpearson 12:20 13 Aug 05

Thanks VoG, shutdown -a prevents a shutdown, but stinger didn't find anything.

Unusually, the box that pops up with NT AUTHORITY\SYSTEM has my name in it together with a greeting in Spanish. I'll try other Anti Virus programmes, I don't want to re-format my HD yet.

  johnnyrocker 12:22 13 Aug 05

if xp are you disabling system restore first before scanning?


johnny.

  VoG II 12:26 13 Aug 05

Maybe this?? click here

  trevpearson 12:48 13 Aug 05

VoG, that looks like the sucker!! Had 49 scheduled tasks, removed them all and so far so good.

Thanks

This thread is now locked and can not be replied to.

How to get Windows 10 for free | How to install Windows 10: There is still a way to avoid paying…

1995-2015: How technology has changed the world in 20 years

Alex Chinneck’s giant ice cube Christmas tree at Kings Cross

Apple rumours & predictions 2017: The iPhone 8, new iPads, and everything else you should expect fr7…