China DOS Union

-- Unite DOS · Advance DOS · Grow DOS --

Union site: www.cn-dos.net　Forum site: www.cn-dos.net/forum
DOS stands for freedom, openness and progress. Let us work hard, learn from the openness and GNU spirit of FreeDOS and Linux, and together build and grow a free GNU GPL world!

Guest Register Log in Members Blogs Search Command Prompt Bash Upload Statistics
中国DOS联盟论坛
The time now is 2026-08-26 04:15
Welcome new member zhaofeng0420　 RSS
47,812 topics / 349,910 posts / today 0 new / 48,264 members 不转换/ 简体中文/ 繁體中文（台灣）/ 繁體中文（香港）
中国DOS联盟论坛 » 其它操作系统综合讨论区 » The best way to clear "Sasser"___Introduction to the method of deletion under DOS View 2,721　Replies 21
1 2 Next › Tell a Friend Share to X Share to Weibo Share to Telegram Share to QQ Zone Copy Link QR Code
Original Poster Posted 2003-08-14 00:00　·　 中国 广东 东莞 电信
禅宗
元老会员
★★★
CEO
Credits 1,019
Posts 300
Joined 2002-10-20 00:00
23-year member
UID 33
Gender Male
From 广东
Status Offline
Recently, the Slammer virus has invaded in large numbers. Today I received several users' calls, and it turned out that they all got infected. How to remove it? In fact, this virus is very easy to remove. At this time, DOS is needed. Follow me:
　　1. Boot into the DOS environment using a DOS system boot disk (it is recommended to use a CD - boot). If it is the NTFS format, you also need to load the DOS4NTFS software. Of course, it is best to use the boot disk in this forum. Then the prompt A:\> appears.
　 A:\>C:\
　 C:\>
　　CD C:\windows (or CD c:\winnt (when the OS is NT or 2000))
　　2. Find the "msblast.exe" virus file in the directory.
　　C:\Windows>dir msblast.exe /s/p
　　3. After finding it, enter the folder where the virus is located, and then directly delete the virus file.
　　Del msblast.exe　　
　　The above - underlined parts are the characters input by the user with the keyboard!
Then restart again, and there will be no virus. Finally, remember to download the Microsoft patch!!!
禅宗——大道至简，知易行难！
网站： http://www.dgzens.com

QQ: 11951692 微信: dgzens
E-MAIL: warmrose@21cn.com
Floor 2 Posted 2003-08-15 00:00　·　 中国 河南 驻马店 联通
红色狂想
金牌会员
★★★★
龙哥DOS
Credits 4,289
Posts 1,501
Joined 2003-02-23 00:00
23-year member
UID 983
Gender Male
From 河南省
Status Offline
In this way of speaking, then it shouldn't be difficult to design a "Blaster" special-kill tool. Isn't it just about finding and deleting!
C++C++C++C++C++C++C++C++C++C++C++C++C++C++C++
C++ ☆☆☆ 中国ＤＯＳ联盟成员 ☆☆☆ C++
C++ ★★★ 爱提问的红色狂想 ★★★ C++
C++C++C++C++C++C++C++C++C++C++C++C++C++C++C++
Floor 3 Posted 2003-08-15 00:00　·　 中国 浙江 温州 电信
imp
银牌会员
★★★
Credits 1,001
Posts 309
Joined 2002-11-19 00:00
23-year member
UID 283
Gender Male
Status Offline
Still, people are scarier

A large number of people are using this vulnerability to launch intrusions
Floor 4 Posted 2003-08-15 00:00　·　 中国 河南 驻马店 联通
红色狂想
金牌会员
★★★★
龙哥DOS
Credits 4,289
Posts 1,501
Joined 2003-02-23 00:00
23-year member
UID 983
Gender Male
From 河南省
Status Offline
Is there any relevant material mentioned by the person above? Let me have a look?
C++C++C++C++C++C++C++C++C++C++C++C++C++C++C++
C++ ☆☆☆ 中国ＤＯＳ联盟成员 ☆☆☆ C++
C++ ★★★ 爱提问的红色狂想 ★★★ C++
C++C++C++C++C++C++C++C++C++C++C++C++C++C++C++
Floor 5 Posted 2003-08-15 00:00　·　 中国 湖北 武汉 联通
iceboy
银牌会员
★★★
Credits 1,681
Posts 512
Joined 2003-08-02 00:00
23-year member
UID 7953
Gender Male
Status Offline
C:\>cd winnt

C:\WINNT>del msblast.exe

C:\WINNT>md msblast.exe

C:\WINNT>attrib msblast.exe +r +h +s

Okay, this virus will never infect again...
Somehow somewhere I've got to choose.
No matter if it is win or lose.
Floor 6 Posted 2003-08-15 00:00　·　 中国 广东 东莞 教育网
禅宗
元老会员
★★★
CEO
Credits 1,019
Posts 300
Joined 2002-10-20 00:00
23-year member
UID 33
Gender Male
From 广东
Status Offline
This virus is not difficult to remove. It's just that when it attacks, most users don't know what to do. At this time, DOS will show its powerful use. Hehe
禅宗——大道至简，知易行难！
网站： http://www.dgzens.com

QQ: 11951692 微信: dgzens
E-MAIL: warmrose@21cn.com
Floor 7 Posted 2003-08-15 00:00　·　 中国 安徽 滁州 天长市 电信
LanE
银牌会员
★★★
Credits 1,835
Posts 648
Joined 2002-11-08 00:00
23-year member
UID 197
Gender Male
Status Offline
The following is a quote from Red Fantasy on 2003-8-15 9:41:34:
In that case, it shouldn't be difficult to design a "Sasser" special killer tool. It's just about finding and deleting!

If it's a tool under WINDOWS, we need to consider whether there is a process of this virus in memory and how to terminate that process
Also, we need to carefully study whether it has modified other system settings. It doesn't matter if it's for personal use, but when making a tool, we need to consider leaving no garbage
Floor 8 Posted 2003-08-16 00:00　·　 中国 江西 吉安 电信
ko20010214
版主
★★★★
Credits 7,296
Posts 1,628
Joined 2002-10-16 12:00
23-year member
UID 10
Gender Male
Status Offline
Awesome!
ko20010214
=================================
大功告成，打个Kiss!
ko20010214@MSN.com
神州优雅Q300C
Intel CeleronM 370处理器 | 256MbDDR内存
40G硬盘 | USB2.0 | IEEE 1394
13.3 ' WXGA 宽屏(16:10) | COMBO光驱
10/100M网卡 | 四合一读卡器
Floor 9 Posted 2003-08-16 00:00　·　 中国 北京 联通
lianglimin
初级用户
★
Credits 139
Posts 9
Joined 2003-07-13 00:00
23-year member
UID 6858
Gender Female
Status Offline
Okay, I don't understand. But my machine doesn't know what virus it is. Just can only open the first-level page, and the second-level page can't be opened.
Floor 10 Posted 2003-08-16 00:00　·　 中国 湖北 武汉 联通
iceboy
银牌会员
★★★
Credits 1,681
Posts 512
Joined 2003-08-02 00:00
23-year member
UID 7953
Gender Male
Status Offline
I don't understand.
But my computer doesn't know what virus it is.
Just can only open the first-level page, the second-level page can't be opened.

Is that a virus? It seems to be a problem with your network.. hehe
Somehow somewhere I've got to choose.
No matter if it is win or lose.
Floor 11 Posted 2003-08-16 00:00　·　 中国 浙江 杭州 华数宽带
hhhhhh
初级用户
★★
Credits 516
Posts 156
Joined 2003-07-28 00:00
23-year member
UID 7657
Gender Male
Status Offline
Under Windows, it can be manually killed, which is very simple, and now the latest versions of all antivirus software can kill this virus!
Floor 12 Posted 2003-08-16 00:00　·　 中国 江西 吉安 电信
ko20010214
版主
★★★★
Credits 7,296
Posts 1,628
Joined 2002-10-16 12:00
23-year member
UID 10
Gender Male
Status Offline
Quote from iceboy on 2003-8-16 17:25:10:
Is that a virus? It seems to be a problem with your network..? hehe

It seems to be a virus issue.
It seems to be caused by the RPC service being shut down.
I don't know for sure.
ko20010214
=================================
大功告成，打个Kiss!
ko20010214@MSN.com
神州优雅Q300C
Intel CeleronM 370处理器 | 256MbDDR内存
40G硬盘 | USB2.0 | IEEE 1394
13.3 ' WXGA 宽屏(16:10) | COMBO光驱
10/100M网卡 | 四合一读卡器
Floor 13 Posted 2003-08-16 00:00　·　 中国 上海 宝山区 电信
沈洁
金牌会员
★★★★
小飞侠
Credits 4,590
Posts 1,812
Joined 2003-04-02 00:00
23-year member
UID 1400
Gender Male
From 上海市
Status Offline
^_^I checked it!
There is no such virus in my computer!
^_^
Floor 14 Posted 2003-08-17 00:00　·　 中国 广东 珠海 教育网
柏仔
初级用户
★★
DOS爱好者
Credits 478
Posts 100
Joined 2003-04-22 00:00
23-year member
UID 1648
Gender Male
Status Offline
I think my XP might have been infected. Is it the one with a countdown to shutdown?

|||||||　 寻人启示：姓名：
| c●●　~年龄：20，性别：男
|　 ♂▃~ 特征：帅.很帅.酷.特别酷....
| |︺英俊潇洒.风流倜傥，玉树临风→我

单钓E时代论坛
Floor 15 Posted 2003-08-17 00:00　·　 中国 广东 珠海 教育网
柏仔
初级用户
★★
DOS爱好者
Credits 478
Posts 100
Joined 2003-04-22 00:00
23-year member
UID 1648
Gender Male
Status Offline
Mine doesn't seem to be. But for some reason, it restarts after a one-minute countdown once it's connected to the internet.

|||||||　 寻人启示：姓名：
| c●●　~年龄：20，性别：男
|　 ♂▃~ 特征：帅.很帅.酷.特别酷....
| |︺英俊潇洒.风流倜傥，玉树临风→我

单钓E时代论坛
1 2 Next ›
Printable Version | Subscribe | Add to Favorites
Forum Jump:
[ Contact the Union admin team - 中国DOS联盟 - Basic version ]

Sponsored by ifanr Inc | © 2001–2023