In Action: Sasser Worm

[TheDXDan]

thANK god i use windows 7 professional

[Ibrahims111123]

i got scared so i went to comments and turned off sound xD

[NorthWolfs]

Good thing I keep a hold of my 2 Windows 7 Re-Install discs

[SniperMen1999]

why you dont make a anti-virus form this you are asome you know everything :D thats cool

[mrpapafunky7879]

I love these videos! a virus is the most scariest thing when I'm online.It's always in the back of my mind i cant surf without worries!good 2 see a virus in action passively rather than firsthand

[iamipula]

oh god.. my neighbours got this in 2004.. and it was damn bad

[nastyscaper]

Shutdown -a

Hehehe :)

[PeanutRaper]

i start to panic when i have viruses



[kawaiixvocaloids]

@PeanutRaper lol i panic when the happy virus greets me

[carnagecat8]

@PeanutRaper

same

[Eragon86micky]

lol :0

[thehit321]

man know wonder u got all these viruses!!

[MrProJumpStyler]

its funny how im watching these vids while scaning my Laptop for virus;s :L

[LuckyIzzy659]

today microsoft released something that would help my computer fight over this. is the sasser worm back?

[f33master]

err maybe emmm idk is there good hackers

[zapix12]

when i seached this video

avast picked up a worm lol

[explosionZACH]

damn

[MrEskiso]

A simple Start->Run : Shutdown -a

Would stop the count down btw

[TheMiniclip007]

I have installed a new computer because my old has got a virus UNDETECTED from avira and it deleted winlogin.exe....and i cant enter...i think that my files are still there but i cant login but i have a new one :)))

[DeathDealer775]

Lol you rape ur computer.....

[TheMiniclip007]

@DeathDealer775 THATS A VIRTUAL PC MADE FOR VIRUSES(i mean,made to see how viruses work and doo).

[LoudGJ]

@narutorocks2200 That's what it is suppossed to do.

[ouh93]

this virus atacked my pc Avast didnt stand a chance.and Creating Lsass.exe crashing is easy its just a simple code.

[ouh93]

same thing happend to me a month ago when i clicked on a porn Website i got infected by A Botnet or A worm my Windows was running slowly and then when i was playing wow=World of Warcraft my pc started turning off 3 times and then it died.tryed scanning it with Avast 5.0 didnt work he just increased his Potency of Atack.I Think it was this Worm that Atacked me my CPU usage was of the charts 80% sometimes 100% lol.

[TheHackerTNT]

lol LSASS.EXE lololol

[eduds6]

This worm can Hijack the BIOS?

[magenta1000]

My old laptop got this worm way back in 2004 before they knew how to fix it. The computer tech people had to wipe its memory. RIP, my dear computer.

[Halo3Sniperhelpers]

The Computer Can not boot the sasser worm over writes the LOADER from windows which is Boot and it edits it and it pops up again and resets and same thing

[hackiosa]

i come from waffensen in rotenburg in germany, where the virus was made :)

[buddyred1]

fight computers fight!!!!

[Flemr12]

I had this worm before last night i got rid of it the worm was the reason my computer was restarting i got annoyed since i need to hit f1 to start my computer.

[bartholameu]

Oh my god.

Friend, you need to get tools to remove this, this is one of the most hard viruses to remove in all of the internet right now.

It is most likely that you cannot remove it with them, (some may HIDE the virus, it doesn't get any better than that, it may come up at any time with only 10seconds remaining)

Call Microsoft and get some support, before you lose all your files, the virus is gonna put your pc to an end with this virus, your files will come mad and start closing down soon.

[myrodgers]

Good video, If you keep Windows Updated and your Antivirus updated you will be great. Running Windows OS not genuine? Then that is your problem!

[sensationdj10]

i have in system32 lsass.exe ? what is that ? :|:|

[PS3POWERFTW]

I have that too and i cant get rid of it. It's in my startup and even comes back after i uncheck it.

[gamemastervideo]

may i ask that my computer's graphics(icon,picture,wallpape­r etc.) are messed.

the color of it is messed up. is my computer has a virus?

[bartholameu]

Maybe yes maybe not.

it could be because you download alot of things.

Remove all the trash you have there, even if you like it or not, go in to regedit and search for all your downloaded files, remove them. -Hear what I say, your computer wont last longer if you continue to have it in that state.

I had that, it was only a matter of time till it couldn't start cause of BSoD issues.

[mollymolly93]

a inportant system file i think.

i have it in my pc

[msheldrick1]

well.. if you delete it, windows will sort of cease to function. So, don't delete it

[bartholameu]

@sensationdj10

DON'T TOUCH THAT FILE! DON'T DON'T!!

That is a very important file of windows, it has nothing to do with the lasser virus,

lasser name was based on lsass, but has nothing to do.

Also, DON'T USE REMOVAL TOOLS!

Even though it looks like they remove it, they plant tiny worms there, trust me. No one is dumb mate, try to outsmart the virus with your own knowlage, for example, it's a time bomb set for today, what if you put the clock back for a year back? There are more ways

[artrasa]

Interesting video..... but can somebody tell which song was used as background music?

[imccoury]

@artrasa midnight garden

[denikson3]

i have "cancel shutdown" shortcut, that cancell shutdown if virus strikes.

Shortcuts code is easy: shutdown -a

[DjKDM7000]

I surely don't have that. Whatever I have, a lot of people seem to have now and no one seems to know how to fix it, and no one is talking about it (with exception for all those people in google trying to find out why it's happening). DCOM message appears unexpectedly, and once it does, you know you have only 60 seconds to shut down. I know it's about to happen again soon because my cut and paste isn't working.... and virus protectors do not seem to remove whatever this new thing is.

[pinksock133]

look up sdra64.exe maybe

[Xdarkitox]

The maker of this virus is an aleman with when he going to the 18 ages!

[therock557]

Epic! Avast is GOOD STUFF.

[therock557]

Why do people make these things!?

It might be Microsoft trying to destroy their buyers' computers, so they will buy a new one.

[RetroKingdomrules]

i agree with that!

[masterbrice]

The thing about the viruses and woms is that you can have the best protection from any software developing company on the planet but there always a chance your computer will be infected. The best thing to prepare for a threat is periodically create backups to secure your a copy of your files and other senitive information.

[icovada]

Linux.

I can laugh more.

[RosetheHedgehog145]

F***! I have that! >:[

but it isn't doing what it should be doing..like randomly shutting down.. o.o

[Dark0Lord7]

@XxTSAlphaxX the more antivirus programs the worse, they have conflicts between them.

[macandfriends]

why is it that viruses are so creepy?

[Pixelpenguin]

I don't know. Once, my mom had a really bad one that left error messages that said things like "OGGLAA OGGLAA BOO!"

Like, chanting or something.

I thought it was terrifying.

[SadisticGamerClan]

@macandfriends Not very many people know how they work. And humans fear what they don't know (sometimes).

[bartholameu]

@macandfriends

Viruses are meant to be creepy so that the victim feels unconfortable with the state of his computer. - Otherwise, viruses were nothing but crap.

Besides, sometimes I entertain myself downloading trojans to do a scan on it (without openning, ofcourse -.-)

[BerryTheStraw]

@macandfriends I think the music he chose for the video partially contributes to the creepiness you, others, and myself maybe feeling :P

[deadeye770]

really scary

[Chocobow9]

Could anyone tell me if this is a helpful Anti-Virus Software Combination?

AVG (Free)

Spybot Search and Destroy

Malwarebytes

They have been working for me for over a year now, but I need to make sure that my computer stays protected.

[Dark0Lord7]

@Chocobow9 I would reccomend Avira Antivir instead of AVG.

You will also need Panda Anti-Rootkit.

Scan your computer once a month.

And always have your system up-to-date with the latest updates.

[ben14279]

Im sure AVG is pretty reliable.

[FlamingDuckStudios]

Sophos ftw

[Doommaster1994]

At 1:29, when that screen comes up, go to Start > Run then type in shutdown -a and that screen will go away.

[clonemate55]

malwarebytes done

[Zukyak]

easy solution to all:

Darik's boot and nuke

[uut0]

wtu happens if i kill the avserve.exe by using taskmgr?

[prmccarron]

Plz help! My computer says the same thing, but rather than LSASS.EXE ending it's services.exe. I don't have avserve.exe or anything but it still shuts down. Plz someone help! Btw I have Mcafee and it only says something like COM Surrogate wants access to the Internet so I press block every time.

*posted from Wii Internet Channel.

[itcrowdfan92]

To remove them quickly, always disconnect from internet first because then the viruses could download more viruses. then scan your pc with all of these freeware scanners:

Malwarebytes

SUPERAntiSpyware

Combofix

Smitfraud

AVG anti virus

Some scanners are stronger than others, so always do a full scan, before connecting to internet again.

[Hondje43]

i use:

Super anti spyware (looks name virus, but it isnt)

Malwarebytes

AVG (anti virus Grisoft) free

[oliver5789]

i use MBAM and AVG

[BatteriPakke]

i use.. Avast! and... Avast!

[themousemaster]

i use Avast 2 the other day a trojan got into it,s memory but the weird thing was the trojan was from my spyware doctor

[RakureX2]

Try going to Start>Run and typing this:

Shutdown -A

[WZZUPTBAGED]

:) me'z helpz you

[clonemate55]

om this rly old but to stop future infections update windows and get malwarebytes very helpful program, also get a good anti-virus like norton or i recommend kaspersky.<--not sure if i said dat right mo well.(not:combofix isnt for amateur's)

[phillipjfry6]

AVG.

[Plxi]

when you have a virus like that and it will shut down the computer, type in "shutdown -a" than stops the pc with shutting down.

[jamesoleruster]

did you mean without shutting down because you said with shutting down

[uut0]

if you do that it comes back i think

[uut0]

it comes back i think but this is a good way to delay the shutdown =D

[Plxi]

nope...

[uut0]

if i use visual pc and i really screw it up does that have any effect on my main system?

[pokemontrivia99]

no it doesnt

[qqtt991]

oh god i thought i had this virus once...

i turned my PC on and suddenly a window came up saying the Lsass process had been unexpectedly ended and needed to shut down. i freaked out then and let it shut down and started virus scanning with 3 different scanners at once. lol

turns out i dident have it. O_o

plz tell me what happened...

i was REALLY scared

[uut0]

my scanner stinks i scanned a downloaded file and it was virus etc free then i opened it and i gave me a virus (i thought it was my pc lagging but it apperanly wasent) later on i did a full scan and it found a virus. maybe do scanners need something to detect the virus (dont open virus again)

[tigerstupid]

this is a great worm, love to see the source code. Haxxors rule!

[electrobussterr]

Btw, no one makes vids about cybercrime like OnNeutral :P

[dummkopf26]

There are the good and bad hackers in the world. There are top class white hat hackers like my friend who use it for good, and the bad hackers who make a life out of other's information. The only reasons why the bad hackers hack others, is because they need a life!!

[mavamaarten]

Nope.

There are only good hackers.

Bad hackers are CRACKERS.

[electrobussterr]

Without crackers there wouldn't be any illegal software out there.

[bartholameu]

@dummkopf26

That has nothing to do with it.

People create viruses in order to make money creating anti-viruses properly made to delete the one they made. - Almost every internet user at the momment is a hacker, most likely you too, and me, and everyone. - Tell me you never cracked a game or any software, that's hacking.

VIRUS MAKING, is another thing

[Daver869]

@dummkopf26 Yeah I fucking hate virus and the people who create them!!! I'm actually dealing with the "google redirect virus" its pretty freaking annoying!!! I don't know how to fix it..... :(

[ShadowRSonic]

@Daver869

Check your hosts file.

(%windir%\system32\drivers\etc­\hosts)

Remove all entries except:

127.0.0.1  Localhost

[LuckyIzzy659]

@dummkopf26 uses it for 'good'?

like what?

[thecooldude9999]

@LuckyIzzy659 programing skills debugging skills ect.. ect...

[COOLHOTRIDER]

@dummkopf26 yup and bad hackers are FUCKING MOTHAFUCKAS DAT NEED TO SUCK DICKS!!!!!!!!! MILLIONS OF DICKS!!!!!!!!!!!!!!!!!

[TheAnimalover173]

@dummkopf26 what is your good hacker friend name?

[mollymolly93]

you can spop the shutdown by going to run

and in the box tiep in shutdown -a if that did not

work tan do shutdown a-

[bam94]

wow, just write -a in cmd gosh x)

[electrobussterr]

shutdown -a

[STAYTOONED2ME]

hey dude

i just found a file called win.ini located in my c windows area

is it a good file?

[Blitzkrieg697]

Yes. win.ini is an important system file. Don't mess with it.

[kieran86uk]

or - you could get a mac and be immune to it :-D

[xxxjj18]

Just to clear all of this up:

Mac's ARE NOT immune to ALL viruses; viruses for the Mac are being worked on every day. There just aren't as many Mac viruses as the Windows due to the lack of programs that you can download on the mac

[Bixtin]

"due to the lack of programs that you can download on the mac". Did you pull that out of your ass? There are equally just as many Mac programs as Windows ones.

The reason why there aren't as many viruses for Macs is because there is no profit in infecting them. They would rather infect two million PCs than two hundred thousand Macs.

[Donkey10345]

People create virus to keylog you and get personal information

[areUfunny1]

my cousin says viruses are made by a bunch of nerds with no life cause they cant get any girl friends. true? hahahaha :D

[IShltMyPants]

lol

[ShadowRSonic]

Two types of nerd:

-Good

-Bad

a good nerd uses his/her abilities for good, stopping viruses and stuff

a bad nerd uses his/her abilities for bad.

Making viruses, stealing info etc.

[jellis1408]

Well, they call them white hat and black hat but, yeah, same principle.

[mavamaarten]

You have also both, like me.

Bad : making patches for genuine advantage, so people don't get annoying pop ups (is good too)

Good : helping people with their problems...

[marshey123]

bad nerd ...making nukes killing many people...

[ScootTheFox]

I have the same thing but i can't get it off. Someone help?

[kevinax57]

yup i had the same thing

[Loxspliff]

Sven Jaschan wrote this virus and it caused 10million dollars worth of computer damage, google his name

[RS2hatesTomatos]

Why would someone create a Virus??? For what?!?!

[plasticnemesis]

yeah i don't understand what kinda pleasure they get from it. w

[IShltMyPants]

lol i dun send viruses and i hate viruses also but i think people sent them for revenge n stuff lol

[vilius1234]

omfgzomgwtf i had the same it crashed my pc now i have a new one.... fucking rapped virus... >:(

[danooct1]

Is there any way you could film either the CIH virus or Magistr virus in action? They both seem incredibly dangerous, especially since CIH flashes the BIOS.

[bristowman]

cos its a windows command :p

[pinkgumz]

what program do u use to get rid of it?

[XtupidArts]

Virtual PC :P

[gackt4ever]

I had that basterd half a year ago, and this morning it happened again. But at least I know what program to use to get rid of it now.

[backlash44566]

can you tell me what the music is runing in the background lol :X

[onNeutral]

The group is called Bond

[seansfilms]

it is midnight garden by bond

[Lixxom]

my brother had the sasser

[danooct1]

If I'm not mistaken, the song is Midnight Garden by Bond, correct?

[onNeutral]

correct

[Blizz4rdxx]

at the end you can go to "start" -> "run" and then you type shutdown -a...

Your pc won't shutdown!

[adyline653]

To stop it from shutting down, press start, run and shutdown -A.

[venichen1]

had this one on my old laptop... can't fix it...

[Xzun009]

When you'll start making viruses you simply can't stop.

[leedsunited12345]

Hey, my computer caught this, but it doesnt show the message before it shuts down, it just does it and I have windows service pack 2... What do u guys reccomend?

[xXsdeesyopopxX]

Because they are Mentally Ill Fucktards

[MouthofSaurons]

i once had that virus :P

i have to stop using keygens >:(

[Doommaster1994]

If you have one of these viruses, go to Run by clicking START and RUN then type in "shutdown -a" and the computer won't crash. I got that off of Wikipedia.

[masta422]

Couldn't you just use shutdown -a and then fix the problem?

[donkeyguy111]

The system would be to unstable to use after the shutdown sequence.

[jwjustlookin]

I used to have the sasser worm, but this was waay before microsoft created the malicious software removal program... it kept restarting my computer =\

[danooct1]

Indeed, the period between the time when a virus is introduced in the wild and the time when antivirus companies come up with a fix can be a living hell.

[AceAttorneygirl]

i´ve heard things of it like it´s very dangerous.

but now i know what it really does.....uhhhhhh i hope i won´t get it

[hunter101909]

i just recently got browser hijacked on my vista but all i had to do was go to back up and restore center and click restore files and it was gone

oh yeah and i would also like to meet all the fucking douche bags who make viruses and fucking throw a handfull of fire in there face

[masta422]

Agreen, those people have no life and probaly still live with their mom at 45 years old..

[sirfatalx]

Goto Start. Type CMD. Type Shutdown -a in the console. Hit Enter. The timer will stop. It is just batch file.

[andor44]

It doesnt work so easy ;) Its not an simple executed batch....

[donkeyguy111]

The system would be to unstable. Its not a cheap batch file, its a crash of lsass.exe (i think) making it unstable.

[slayer5056]

i have gotten that worm before......

[cheat12code]

I only make viruses - i NEVER distribute them - i just test it on my worthless junk PC's

[Tummas1992]

Yeah.. Right :P

[masel95]

the man who has made that sasser worm was 17 years old and he is now working in an antivirus coorporation!!!!

[Abeastlypie]

Well then he got arrested before he started working for them lol

[mavamaarten]

so he knows how viruses are programmed !

[mellokat1]

just once i'd love to meet one of these cumchuggers who writes these things, explain my displeasure with what they do followed by my smashing their head flat with very large

framers hammer.

[JCF22Lyoko]

I don't think it's very cool. Imagine your computer shutting down when you're doing something very important.

[sidekick3iskool]

Go macs go macs go macs!!!!!!

[laudirox]

i second that opionin

[kokobeanie994]

?...

[kindvideo2]

hey,i just got that worm today.

when i first booted up the computer it said:

system error

Lass.exe

object not found!

I clicked ok then the computer restared.

i had to re-install windows.:(

[Impaqowns]

what is the link to downloading this song I would like to put in my video =)

[pq8i]

plz how can i prevent it from infecting my computer

[pq8i]

What is this song i love it very much plz gave me the download link

[onNeutral]

By a quartet called Bond

[111Froggz111]

whats the song by the way i love it?

[onNeutral]

Music by a quartet called Bond. Cool music

[111Froggz111]

can these computer worms spread to local computers say a library?

[onNeutral]

A property updated computer with good Antiviral protection should protect aginst this threat.

[RehdBlob]

Useful. My comp got this worm. Thankfully, I found that way to stop the shutdown and download a program to delete that thing. Just barely.

[bubbaUK]

lol this worm made me buy a new computer...very dangerous and annoying

[toptop90]

there was a way to get rid of it.you just had to be quick.bloody quick!

[razor191919]

<<; all you have to do is treat it like a Trojan...

[ouchthathurts5]

Stop the infection:

shutdown -a

del %WINDIR%\avserve.exe

del cmd.ftp

del WIN.LOG