Riddled with adware win2000 server.

[mctonale 0]

My friend got a dell pc (old server running win2000) from a company that went bust. She started using it on the internet without any anti-virus.

 

I have managed to remove the viruses by installing AVG but can't remove adware because ad-ware, after starting scan causes isass.exe to interupt and shutdown windows.

 

Followed path for isass.exe (showing all hidden and protected os files) the programe doesn't exist.

 

Don't want to spend money on more adware to find it also doesn't work.

 

Can't boot from disc (don't have one).

[peterh 1]

You have the Sasser worm!!!

Use tool to remove it, and patch server up.

 

http://support.microsoft.com/default.aspx?scid=kb;en-us;841720

 

[GlendaleSS 0]

Yup, sounds like Sasser to me...

 

Man, Sasser is almst as good as the Blaster was....dang

 

GL!

[theefool 0]

You can actually stop the shutdown process by going to Start, then Run and running shutdown -a

 

shutdown -a ---->stops the shutdown process.

[mctonale 0]

Wasn't sasser, ran fix but no infection found.

 

Managed to run ad-aware and removed 1500 critical items.

 

Ran spybot but still getting the odd pop-up and iexplore closes itself occasionally.

[peterh 1]

Lsass.exe is the 'Net Logon' process, a vital part of authenticating with windows. Sasser can infect this process and cause instant reboots.

Installing the MS04-11 update and the sasser removal tool will get rid of it.

http://www.microsoft.com/security/incident/sasser.mspx

 

I am not sure which antispyware programs work on Windows Servers but best protection is to make sure all the latest security patches are installed.

 

Running SUS in a commercial environment will ensire all desktops are regularly updated:

 

http://www.microsoft.com/windowsserversystem/sus/default.mspx

 

 

[Sampson 0]

If you must run IE, and since it is closing down mysteriously, you probably have a number of browser helper objects attached. Download BHODemon: http://www.majorgeeks.com/download.php?det=3550 and have it help you find and get rid of them.

Start using a different browser - Opera, Firefox, Mozilla, or K-Meleon. Use IE only to update windows.