The first thing you need to do is to stop your PC from automatically shutting down. To do this, follow these steps:
Press the "Start" button, and then select "Run" .
Type "shutdown -a" (without the quotes). That's the "shutdown" command, with the "-a" option, which stands for "abort the pending shutdown".
Once the countdown begins telling you that the PC is going to shutdown in 59 seconds, etc. Press "OK" to stop the shutdown from occuring.
NOTE: You will need to repeat the steps above anytime YOU start your PC, until you have effectively finished removing the worm as described below.
Once you have stopped it from shutting down, navigate to the following website:
http://www.microsoft.com/security/incident/sasser.mspx
Carefully follow the steps on that website to repair and remove the worm. Please see the important note below! :-)
(IMPORTANT NOTE: It is VERY important when running the (Sasser Removal program),to disable your system restore FIRST. If you do not do this, your PC will likely Re-infect itself as the files in system Restore are protected from being cleaned unless System Restore has been disabled during the Virus Cleaning Process. You can Re-Enable the System Restore once you have successfully cleaned the worm from your system).
For information on how to disable System Restore in windows XP, please navigate to the following website:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?Open&src=sec_doc_nam&docid=2001012513122239&nsf=tsgeninfo.nsf&view=docid&dtype=∏=&ver=&osv=&osv_lvl=
I have personally followed these steps and successfully repaired my PC and removed the worm.
I hope this helps at least one person. :-))
Good Luck and happy computing.
