Earthlink, internet explorer and threats from my computer!!!

Factual Questions
1

Today, while using my mother’s computer, I had a rather curious and extremely enraging experience. My mother’s pc has earthlink on it, which, if you don’t know, is a lot like AOL. Anyway, the Earthlink interface was irritating me, so I closed the program and switched to plain old Internet Explorer using the same connection from Earthlink.

Are you still with me???

Anyway, after being on for about a minute, a message pops up that says there was an error etc, and would I like to send an error report. Regardless of whether or not I send the report, a countdown screen pops up, and says I have one minute to close my programs before the computer shuts down!!! There is no way to close that window, and, as promised, the entire computer will restart after one minute. What is causing this, and how can I stop it? I’ve run ever virus, trojan, and spybot program we have, but I guess it’s something else. I don’t have the exact text of the error window that pops up, but it does mention something being disturbed called lsass.exe
CAN SOMEBODY HELP ME??? :mad: :mad: :mad:

2

Sounds like you got yourself a variant of the MSBlaster worm. Patch your OS and perform the removal as described. And run a firewall, such as the free ZoneAlarm.

3

You have the Blaster virus! I’ll try to find a previous thread on the subject and post it here.

4

Try this: http://boards.straightdope.com/sdmb/showthread.php?t=250747&highlight=blaster

5

I think this does not sound like Blaster. It sounds like a brand new worm called Sasser.
Here is some info:
http://www.microsoft.com/security/incident/sasser.asp

Some are calling this worm “Blaster-like”. It is blaster-like in that it is a worm that exploits a vulnerability in Windows. But it is a different vulnerability.

This is the Sasser vulnerability:
http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx

This is the Blastr vulnerability:
http://www.microsoft.com/technet/security/bulletin/MS03-026.mspx

6

Don’t blame Earthlink. I’m using Earthlink (DSL) and have never used their interface. I always go directly to IE and have never had any problems. Sounds like you have one of the worms people have been describing.

7

I’m sorry. I didn’t mean to blame Earthlink. I just didn’t know what could be causing the problem. After I was kicked off the last time, I tried going online with JUST Earthlink, and the same think happened. I don’t blame Earthlink. I’m going to have to find a way to get the patches onto my mom’s computer without using her internet. The connection is terminated long before any program or patch would have time to download. Any suggestions of how I can put it on a disk or CD rom? By the way, I don’t have a decent CD burn software that isn’t music-related. Recommendations?

8

To prevent shutdown, you must shutdown the malicious processes:

Removal instructions from Symantec:

Then you must disable System Restore

Then download Network Associates’ Stinger virus removal tool, and scan your C:\ drive to remove the Sasser virus.