Help with Sasser worm Please!

[biff 24 2000]

A friend of mine brought over his computer because he was having troubles with it. Well i boot it up and when it gets to the login screen a popup appears and it has LSASS.EXE in the title and you can only click OK or close and when you do that it restarts. So i cant even get into widows desktop screen to even try and to remove it. So could someone please help me with this?

 

[ManBearPig]

http://securityresponse.symantec.com/av...venc/data/w32.sasser.removal.tool.html

 

[biff 24 2000]

Originally posted by: Heen05
http://securityresponse.symantec.com/av...venc/data/w32.sasser.removal.tool.html

How i am suppose to use this tool if i cant even get to the desktop screen?

 

[Green Man]

Boot to safe mode and run it?

If not, boot to a BartPE disk and run it and then see if you can get windows to boot and run it again from windows.

 

[Green Man]

D'oh!

 

[biff 24 2000]

yeah safe mode doesnt work either but i will try the BartPE disk, never have used it before but i will try.

 

[Green Man]

Jack the hard drive into another computer?

 

[biff 24 2000]

Originally posted by: Green Man
Jack the hard drive into another computer?

yeah i will do that next, thanks for the ideas and help