Citat:
aleksandaraleksandar: kako ga skloniti kada ga 5 ljudi juri razlicitim programima i niko cak ne zna ni o cemu se radi?
rijec je o sasseru i njega AV ne detektira. Imaš na netu cijelu priču o tome.
recimo....
Follow these steps to remove the Sasser.worm.
Disconnect your computer from the local area network or Internet.
Click Start > Run, type:
shutdown -i
and press Enter.
In the Remote Shutdown Dialog that opens, change 20 seconds to:
9999
and click OK.
Reconnect the network/Internet connection, click Start > Windows Update to install all necessary patches automatically.
Terminate the running process.
Press CTRL+ALT+DEL to open Windows Task Manager, then select the Processes tab. Scroll down the list and search for the following processes:
avserve.exe
avserve2.exe
skynetave.exe
any process with a name consisting of four or five digits, followed by _up.exe (eg 64354_up.exe).
If you find any such process, click it, and then click End Process. Exit the Task Manager
Disable System Restore (Windows XP)
Remove the registry entires.
Click Start > Run, type 'regedit' and click Ok.
Navigate to the following key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
In the right pane, delete the following entries:
"avserve.exe"="%Windir%\avserve.exe"
"avserve2.exe"="%Windir%\avserve2.exe"
"skynetave.exe"= "%Windows%\skynetave.exe"
Close the Registry Editor.
Search for and delete the following files:
avserve.exe
avserve2.exe
skynetave.exe
i instaliraj zakrpu od M$
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx