egafd.com

W32/Sasser-A worm

instructions to get rid of it

Reboot the system into Safe Mode (hit the F8 key as soon as the Starting Windows text is displayed, choose Safe Mode.
Delete the file AVSERVE2.EXE from your WINDOWS directory (typically c:\windows or c:\winnt)
Edit the registry
Delete the "avserve2" value from
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
Reboot the system into Default Mode

Or you could bring up task manager (ctrl+alt+del) and kill the avserve2.exe process then del the registry key and get rid of the files in windows folder (avserve2.exe and it's produce all named *_up.exe or *_upload.exe - *is a number)

then there is
W32/Sasser-E

Stop the process as before (this one is called lsasss.exe )
del registry key
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\LSASS SVR = lsasss.exe

and del file in windows lsasss.exe


if you have avserve.exe then del those as well.

Thats why most simpletons(computer illiterates like myself) choose



Still amazes me why the computer industry doesn't educate/alert new computer users to the dangers on the internet....conspiracy me thinks?

I suppose we should be thankful for people who run all the free websites like

that tell it like it is...a minefield for the unwary

cheers
B.....OZ