Re: sassar
From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 05/05/04
- Next message: Sasser Victim in AZ: "Re: Do I need to be on the internet to fix Sasser??"
- Previous message: Br0wnbear: "Re: do i have sasser?"
- In reply to: Jerry Bryant [MSFT]: "Re: sassar"
- Next in thread: Torgeir Bakken \(MVP\): "Re: sassar"
- Reply: Torgeir Bakken \(MVP\): "Re: sassar"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 05 May 2004 22:15:04 +0200
Jerry Bryant [MSFT] wrote:
> Please try these steps:
>
> (snip)
>
> 1. To prevent LSASS.EXE from shutting down the machine during the cleaning
> process:
> a. Unplug the network cable from the machine
> b. If you are running Windows XP you can enable the built-in Internet
> Connection Firewall using the instructions found here: Windows XP
> http://support.microsoft.com/?id=283673 and then plug the machine back into
> the network and go to step 2.
Hi Jerry,
I'm afraid those instructions are not good enough for WinXP. Nowhere
is it mentioned that you are supposed to use "shutdown.exe -a" to
abort a shutdown on WinXP.
The "RECOVERY" section here mention the "shutdown.exe -a" method:
http://www.microsoft.com/technet/Security/alerts/sasser.mspx
-- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: http://www.microsoft.com/technet/community/scriptcenter/default.mspx
- Next message: Sasser Victim in AZ: "Re: Do I need to be on the internet to fix Sasser??"
- Previous message: Br0wnbear: "Re: do i have sasser?"
- In reply to: Jerry Bryant [MSFT]: "Re: sassar"
- Next in thread: Torgeir Bakken \(MVP\): "Re: sassar"
- Reply: Torgeir Bakken \(MVP\): "Re: sassar"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
