Yahoo Answers is shutting down on May 4th, 2021 (Eastern Time) and beginning April 20th, 2021 (Eastern Time) the Yahoo Answers website will be in read-only mode. There will be no changes to other Yahoo properties or services, or your Yahoo account. You can find more information about the Yahoo Answers shutdown and how to download your data on this help page.

Kerk asked in Computers & InternetSecurity · 1 decade ago

A worm infected my computer. It keeps on shutting down everytime i log in. How can I remove the virus?

Once i logged in it shows a message "System Shutdown". I run over searching about this kind of worm thru internet. I found out its like a sasser virus. I have the latest updates on McAfee and scanned my computer but no virus has found. I also tried the removal tool from microsoft same thing. I have the latest patch and security from microsoft. Now please somedbody help me to get rid of this virus.

Update:

I prevent the worm from shutting my computer by run command and type shutdown -a. and i don't want to reformat my system. I want to solve this problem so if this happens again to my other computers i know what to do.

9 Answers

Relevance
  • 1 decade ago
    Favorite Answer

    start-->run--->msconfig--->in the main window choose minimal boot , then apply and ok then restart and it will be gone , then you shoud start your programs manually

  • Anonymous
    1 decade ago

    First a worm is not nessecarily a virus, Removal of worms is very tricky, Remember any file(s) that get quaranteened by your virus, spy-ware, or malicious code removal tools, were not repaired and are lost, needing replacment. First rule is back-up all your software, OS, Primary Apps and data, Second is to learn how to use firewalls, internet security programs, and com port filters. Third the only way to purge a infection sometimes is to delete the partition, re-Format the Storage device(s), and erase master boot records. then re-install your software.

  • Anonymous
    1 decade ago

    Sounds like a sasser variant. You may see files like avserve.exe or avserve2.exe in the windows or system 32 directory. To identify the infection open the registry editor and find this value: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\avserve = avserve.exe if this or any think similar exsites then run the removal tool by sophos. It is avaliable here: http://www.sophos.com/support/cleaners/sassgui.com

  • 1 decade ago

    Go here and download FREE tools that removes the virus:

    http://www.helpero.com/Questions-and-answers/Compu...

    http://www.helpero.com/Questions-and-answers/Compu...

    Helpero is a web site that helps every Internet user, from all over the world, solve any computer related problem.

  • How do you think about the answers? You can sign in to vote the answer.
  • 1 decade ago

    How do you know it is a virus?

    Did you try to boot in safe mode?

    Maybe it is not accepting your login for some reason...

    Question is...

    If the system is shutting down

    How did you manage to do all those things?

  • Anonymous
    1 decade ago

    Download Free anti virus software and remove tha virus..AVG anti virus is a free software..and panda anti virus also..u cn create bootable anti virus cd 4m panda antivirus software..go to this web site.. www.pandasoftware.com..and download that software...

  • Anonymous
    1 decade ago

    well...first start by turning off system restore then shut down and start back up in safe mode then run the anti virus.

  • 1 decade ago

    could try a removal tool from mcafee i would think they would have seprate tools for sasser etc.. i know norton does

    you could also try this online scan

    www.housecall.trendmicro.com

  • G
    Lv 7
    1 decade ago

    try using these.

    AVG Removes I-Worm/Stration · BackDoor.Generic3.GBB and .GBC · Worm/Generic.FX · Exploit.WMF

    http://free.grisoft.com/doc/5390/lng/us/tpl/v5

    http://www.kaspersky.com/virusscanner

Still have questions? Get your answers by asking now.