[IamHD]

"Norton won't stop this."

I know, that's what I said. :) My daughter called me from work this morning and asked me if I could get rid of it. I told her last night to update her patch from MS, but no, moms don't know anything. I'm waiting for her to bring her computer to me. How would you go about blocking port 445?

Also, everytime she tries to get her patch, the computer shuts down. If I startup in safe mode, can I get online and download the patch that way? Or, should I remove the bugger from the registry, first, and then try to patch?

[Billthedrill]

Try THIS TOOL.

Personally, I'd hold out for champagne...

[ParityErr]

If your daughter has broadband the first thing is to unplug her computer from the internet. Then I would remove the virus from the registry.

After that I would at least install a software firewall such as zonealarm.

[varina davis]

Also, everytime she tries to get her patch, the computer shuts down. If I startup in safe mode, can I get online and download the patch that way? Or, should I remove the bugger from the registry, first, and then try to patch?

Hi there IamHD, maybe this will help. I went to system repair and backed up the settings to before the worm was announced. That let me get on line to find the Sasser fix on Norton, which I used yesterday (following instructions very carefully), and so far, no more problems -- but am knocking hard on wood ;^p