The Worm

First, how do you know you have it? Unfortunately, Sasser shares several behaviors common with other recent viruses. The most common sign is that your machine will indicate that there is a problem and will reboot in 60 seconds. The message caused by Sasser should indicate that the problem is in LSASS.EXE.

You should be able to abort the shutdown within those first 60 seconds by doing the following:

Press the Start button and then the Run menu item.
Type shutdown -a. That’s the “shutdown” command, with the “-a” option, which stands for

Press OK.

This doesn’t fix anything, it just lets you get on with the business of disinfecting your computer.