If you use Microsoft ® Windows ® XP or Windows XP with Service Pack 1 (SP1) and your computer has been infected with the Sasser worm, you can follow the following steps to change your software, remove wormnya, and provide protection against the next attack.

Step 1: Disconnect the computer connection to the Internet
To avoid problems, pustuskan its connection to the computer from the Internet:

For connection to broadband Internet Penguuna Find cable that connects your computer to a DSL or cable modem external modem connects to a computer or cable modem or telephone line telepon.Cabutlah, so that it loses its connection with computer to the Internet.
Dial-up connection users: Locate the cable that connects the internal modem in your computer to a phone line, then unplug the cable is not connected to your computer to the Internet.
Step 2: Stop the Shutdown Cycle
This worm file will not react Lsass.exe other commands (stop responding), which causes the operating system shut down again after 60 seconds. If the team began to turn off the computer, follow these steps so that the system has shut down.

In the taskbar on the screen of your computer, click Start, click Run.
Type cmd and click OK.
At the prompt, type: shutdown.exe-a and then press ENTER.
Step 3: Perform Prevention
The can remove all signs that the worm infects your computer by creating a log file.

Creating log files

In the taskbar on the screen, click Start, click Run.
Type cmd then click OK.
At the prompt, type: echo dcpromo>% systemroot% \ debug \ dcpromo.log and press ENTER.
Creating log files read-only status

At the prompt, type: attrib + R% systemroot% \ debug \ dcpromo.log then press ENTER.
Step 4: Change the system performance
If the computer is showing signs of a slow Internet connection, the worm may have been introduced into their computer network. Nya.Untuk upodate Its difficult it is to download and install software to change the system results to:

Press CTRL + ALT + DEL, and then click Task Manager.
For each of the following steps that may be present in the list, click a task to select it, then click the End Task button to end it.
Each task completed with _up.exe (eg 12345_up.exe).
Each task begins with avserve (eg avserve.exe).
Each task begins with avserve2 (eg avserve2.exe).
Each task begins with skynetave (eg skynetave.exe).
hkey.exe
msiwin84.exe
wmiprvsw.exe

Caution Do not end the wmiprvse.exe task, because this is a task that is using the system.

Step 5: Enable the Firewall
A firewall is a software program or hardware designed to protect the barrier between your computer and the Internet. If your computer is infected, a firewall will help minimize the effects of the worm. Windows XP includes Internet Connection Firewall (ICF). Operaikan ID:

In the taskbar on the screen, click Start, click Control Panel.
Click Network and Internet category.
(If the network and Internet connections is visible, click Switch to Category View in Control Panel on the left side of the Control Panel window.)
Click Network Connections.
Click the right mouse button on the dial-up, LAN, or high-speed Internet adan used for Internet access, and then click Properties on the shortcut menu.
In the Advanced tab, under Internet Connection Firewall, select Protect my computer and network, and then click OK. Windows XP Firewall is now enabled.
Step 6: Connecting to the Internet Back
Connect the cable as mentioned in step 1 in the back of your computer, connect your phone or kemodem.

Step 7: Setup files need updating
To help protect your computer against worms in the future, you must download and install the files of the security update 835732, which was announced in Microsoft Security Bulletin MS04-011. To download the security update 835732, find our site http://go.microsoft.com/?LinkID=526067

Step 8: Control and Cleaning Sasser
After installing the files of the security update on your computer and restart the computer, the website akseslah “What You Should Know about the Sasser worm and its variants” on the site http://www.microsoft.com/security/ Incident / sasser.asp. Use software that Sasser worm cleaning your hard drive can be scanned and cleaned Sasser.A, Sasser.B, Sasser.C, and Sasser.D.

About Internet Connection Firewall
Windows XP Internet Connection Firewall can block useful tasks such as file sharing or printer via a computer network, transmission or storage of multiplayer games. Microsoft recommends that you use a firewall to protect your computer.

If you operate the Internet Connection Firewall and see problems where the task you want, read “How to open ports in the firewall in Windows XP Internet Connection” on the site http://www.microsoft.com/security/protect/ ports.asp.

If you have more than one computer, and wanted more technical information, or want to learn more about firewalls, see “Frequently Asked Questions about Firewalls” on the site http://www.microsoft.com/security/ protect / firewall.asp.