Net-Worm.Win32.Sasser On a Physical PC Network

[@RCT3Crashes100]

Windows 2000 is like the man who gets knocked out halfway through an epic battle, only to wake up and find that all his competitors are dead.

[@chesenuggetmachinima]

Old Viruses: Goodbye to your computer! New Viruses: "Helloo I am from microsoft how may I help you?"

[@kaiufkdlsmf]

Old Spyware: I r in ur background watchin ur pronz hehehe New Spyware: Would you like to update your Facebook status?

[@aeriumsoft]

Really old viruses(like DOS): i jast am doing dis for da lolz, i am not dat bad kome oon!!!1one!1!

[@Liam9787]

New Spyware: Your Windows 10 upgrade is ready!

[@bryanjamesbecneliii3157]

+Katch A Taco lol, nice

[@randomness13]

+Katch A Taco new spyware "The windows 10 anniversary update is ready"

[@Jilvenhong]

I love this guy’s videos. Barely any editing, really high quality, pure honesty. Plus they’re just really interesting

[@seagull179]

Oh! I remember this one! When I was a child, we had one of those (back in '05-'06 I guess). I remember the countdown timer that popped up every single time I booted up. I had nightmares of that countdown timer for a couple of years more.

[@sixfr0nt]

OMG SAME. i don't think i had sasser but the shutdown timer was absolutely terrifying to see as a child

[@awesomeguysuncle]

@@sixfr0ntshutdown -a aborts this FYI

[@ALLENWinWizzy2]

Imagine your about to have a LAN party of a game (AoE, quake, doom) and next thing you know your friends like "why my game lagging I'm on a geforce fx 5900" and then your other friends PC shuts down and your all like look shit

[@NetyashaRoozi]

What about a online game like minecraft that requires someone to run the server through the console

[@leetwizard7029]

If you would read the description, you would know that this virus is about 10 years old. If you have a decent antivirus, you won't get infected, and this virus isn't in the wild.

[@ALLENWinWizzy2]

Leet Wizard are you talking to me? i made it like its the year Sasser was viral not modern time, hence why the games and gfx card i said aren't "modern"

[@irunasoft]

top 10 cs 1.6 server almost fucked my pc

[@xyzzy-dv6te]

@@irunasoft before joining any CS 1.6 server make your config files read-only.

[@mattr2238]

When you're sick of the neighbors stealing your wifi

[@fishexploits5264]

LMAO

[@milki5632]

If Im going down then im taking you with me!

[@lolcheeserofl]

Bloody hell, Dan. You put a lot of effort into this video, setting up this entire network...not to mention it took you a lot of takes, as you stated in the description! Thank you for putting such effort and time into your videos, they are simply fantastic to watch :) It is fascinating to see how this worm works through a network...

[@doncheadle9406]

old viruses: bye bye system32 new viruses: GIVE US UR MONEY OR UR FILES WILL STAY ENCRYPTED

[@JamesTube]

ikr

[@andreiiftode4784]

Old viruses: Haha do you like this computer? Too bad...It is dead :) New viruses: IV U DONT GIV MEH DA MONEH U DONT GET DA COMPUTR BAK! 11!!!11

[@grayroot141]

Old: Being a dick for fun. New: Being a dick for money. I prefer old, tbh.

[@Umbreedon]

+xBIGFACEDSHADOWx viruses were so fun before trojans, rats, and keyloggers were made.

[@yourick1953]

Atleast we are safe.

[@sekkuar]

yo I remember this shit. once my brother decided to format his pc and got this virus in 5 minutes after he finished installing windows xp. priceless.

[@YoutubePizzer]

+ProCreeper 2000 no it was probably WandoowsAxe-pee.bat

[@ebnicolaou]

Oof.

[@nukecorruption]

I remember someone infecting whole school's network computers with a virus similiar to this, that was a mess haha

[@jumpyjolt7015]

@@KZbinPizzer Lol

[@tailsfanteg4712]

@@nukecorruption That guy is fricking legend then.

[@ordinaryyoutuber7377]

1980: R.I.P Computer 2017: Ad in your browser

[@dynamyte0878]

lol

[@AWorthlessGDICoder]

4 years later 2017: Ransomware 2024: Entire GDI trojans that rip your screen apart in stages and play loud sounds

[@DJ_KAZIL]

nah it was like 2000 year

[@thatjokerperson7062]

oh the good ol days when all you had to do to remove a virus was delete a few files

[@bubgamingandvlogs3870]

Yes

[@monteanthony1022]

Thats how you nuke malware these days too,but I haven't been infected with anything since I was in middle school.

[@OmniPhantom]

@@monteanthony1022 clearly you don't do shady shit, if you did you would have to format your drive 5 times a day

[@FriedNoodlee]

@@monteanthony1022 its gotten wayyy more complicated pal

[@Riley_MDS]

@@OmniPhantom I do lot's of shady shit ( pirating ) but not even infected once... Common Sense is still your Best Antivirus

[@bepaque]

This channel is glorious. And so i wondered why does it not have more subs and views? This channel is not for everyone but is sure one of the best hidden gems of youtube.

[@personalspam2365]

Ikr

[@RealMoomoo64]

As a CS major student, this is the most interesting stuff on youtube. Tho i do understand for most people who have little knowledge about coding find this boring to watch.

[@YoutubePizzer]

Yeah!

[@danielwickham3439]

i love this stuff i dont know much about coding but i do know little things like fake virus tricks that you can do on notepad i also know how you can make a very nasty trojan that will kill a vital part of the operating system causing it to shut down but the trojan will also run on startup so although your computer boots up you wont be able to do a lot with it

[@PatchworkRose567]

I know extremely basic coding but I just find viruses interesting and I love dans voice

[@xaenon]

I made a small fortune dealing with this. As one of only two computer-repair shops for like 40 miles in any direction, I had customers' machines stacked up like cordwood in my shop.

[@saghwteam]

Whew. Must've made a killing back in the day huh?

[@xaenon]

@@saghwteam I hate to characterize it as a 'killing' since most of my customers were not exactly 'wealthy' and I did try to keep my labor rates reasonable. Running a computer-repair shop in a primarily rural setting pretty much guarantees you won't get rich. But the sheer amount of work that arrived in such a short time did add up to a fairly substantial amount of income - at least for a few weeks.

[@Daybreak81523]

"It hogs everything for itself, and everything becomes slow and unresponsive" Are you sure you ran Sasser and not Google Chrome?

[@phantasmuh]

okay, thats a good one

[@kaya9293]

Just might be a different iteration lol

[@leontechtalks]

DARN SHOTS FIRED

[@compsciprof]

I'm pretty sure Sasser has a variant called Google Chrome.

[@piniokwilku2282]

remove chrome embrace opera

[@crealol2]

danooct1 before installing sasser on his computer network: "Some of you may die, but it's a sacrifice I am willing to make."

[@jeebusmcchrist]

There's something charming about how down to earth these videos are.

[@spongechair]

Old Viruses: *fake error message* *deletes system files* New Viruses: R.I.P Task Manager

[@Vanessa_Santillan]

Really neat video, I love how you demonstrated how Sasser spreads through the LAN!

[@RandomDude989]

I ran a small ISP in Northern Michigan when this worm hit. My life was hell for a little bit until I discovered what was happening and how to stop it.

[@fizzsoduh]

Wow it’s been almost 10 years since I was 9 years old and watching your videos… now I’m about to graduate in cybersecurity! Thanks for inspiring my career 🙂

[@amessman]

Sasser: uses 100% CPU Compuer: *still fast af*

[@AngelaTheSephira]

IM FAST AS FUK BOI

[@eupher2]

Probably because it's a raw unpatched install of XP.

[@TheresMoreThanOneHer]

I'M FAST AS FUCK BOI

[@CozmixYT]

*[MADE IN HEAVEN]*

[@commander_dolphin5414]

I think it's because real machines are way faster than virtual machines, the latter Dan uses more commonly to demonstrate malware. The VMs that Dan runs other malware on has a non-existent CPU that is very slow in order to prevent the virtualization being resource-hungry. So if you run any OS on a VM today that is beyond the DOS & Windows 3.1 era, using real hardware is far more superior and flexible as opposed to VMs.

[@Dewotto]

funny how Sasser and Mydoom still show up as examples in Windows Malicious Software Removal Kits

[@dakotabedwell6829]

And Blaster

[@hyperspace2223]

Someone: says that their computer is shutting down and restarting randomly Windows 10: *nervous sweating*

[@AWorthlessGDICoder]

My PC: *heavy breathing*

[@SaoirseSecrets]

I remember on my old XP, I had one game on it, maybe a few programs and a lot of pictures. I was younger then, didn't know a thing about computers. It would just be slow all the time. Took 5-10 minutes to load a folder of a program. I'm still curious on what caused it to be so slow. o.o

[@ZilkenianDavenport]

Either the hardware was old, or a virus failed to infect it, but filled it with crap, so your hard drive was overloaded.

[@maximumrisk2004]

Actually that is a given with older Windows Systems. The longer you use it, the slower it gets. I have the habit of formatting my hard drive about twice a year, but thats because I use my computer constantly.

[@thepizzacarpizza1056]

i know why ur pc was slow! u had alot of pictures, u should have deleted some :/

[@Sypaka]

Did it have internet, probably some trojan/Worm - even multiple ones. Depending on the hardware, even on a 233Mhz it doesn't take 5 MINUTES to load a folder.

[@DylanDude]

I once had a Vista PC, however after foolishly delving into Megavideo I got a virus that permanently disabled its ability to connect to the Internet (and its firewall). I've always been curious as to which virus it actually was.

[@65oh7]

I had a hard drive crash on me on a Pentium 4 computer while I was using it. It started loosing a lot of programs and dropping memory until LSASS crashed. It was basically the same thing but with hardware.

[@ChrisInIndy06]

what an awesome channel! I am so glad I found this. I remember these (all of these viruses you profile) causing genuine fear in me as a child, and now it's amazing to look back on it and see the ingenuity of the virus creators - and sometimes their idiocy too, like the virus that asks you if you want to delete your hard drive.

[@slinkyslinkya1096]

well.. happy 20th, sasser and of course, happy 20 years of your interest in malware, dan❤

[@TheBluBalls]

6:11 so it basically turns all infected systems into Vista machines?

[@munastronaut8147]

"I've got a Windows OS Upgrade, but at what cost"

[@supervitu64]

LMAO

[@goofyahdemoman1134]

Me: *sees no shut down option* Me: *laughs in physical power off button or pulling the plug* Also imagine the day when a computer exists that can cleanse itself of a virus by applying a hot fixes or patches at speeds so fast that your PC will have not been damaged in any way, and it being able to expertly extract encryption keys from any ransomware. Microsoft is probably going Macrohard just thinking about the future of their computers.

[@salami99]

Hey Bro, you got 19 days left to activate Windows XP

[@V4ker]

-1940 days, to be precise

[@vandredphatom3434]

Dan, no one hates you, because you're awesome. Thanks for educating this 14 year old of the malware of the past!

[@idealsurrealism9587]

So are you 18 now?

[@tailsfanteg4712]

20 probably.

[@TheCJRhodes]

perhaps 21

[@pzrxex]

how about 23

[@ItsLachieNZ]

KZbin went down while I was watching danoct1 videos... This means something...

[@yourick1953]

not a virus, the servers just shut down

[@AlexVasiluta]

he was making a joke -_-

[@arcanepool]

it was a joke -_-

[@kirinplays3822]

not a virus, the servers just shutdown

[@sadduck1737]

nort a voroos ze sorvors jerst swot don

[@avi8aviate]

Older viruses: Abra Kadabra! Your computer is now a brick! Newer viruses: giv monyz

[@MattDeRac]

Old Viruses: Bye Bye Computer. :D New Viruses: Gimme your lunch money.

[@NotBen101]

can you show us the new internet explorer bug?

[@pitok9]

Look. Microsoft got hacked so DO NOT USE Internet Explorer. Download Google Chrome and never use again Internet Explorer. I saw that on the news. They said that Internet Explorer got hacked and infects your computer!

[@pitok9]

Is not a lie! I saw it on News in Netherland!

[@pitok9]

NO. Go to www.jeugdjournaal.nl And find it.

[@LemSportsinterviews]

Missy Briarwood i like how you bold all of your comments it really makes it easier to hear you, thanks

[@FrostsoftProductions]

pitok9 it didnt get hacked.... there was an exploit. Almost every major program in the world has had major exploits at one point. SSL had a HUGE exploit but that didnt mean everyone dropped SSL to get another kind of encryption program.

[@cambridgeport90]

Love historical videos like this ... And love the computers you have on that network. Those Toshiba Tecras were tanks back then. I remember this worm, though I managed to evade it somehow.

[@Umbreedon]

Old viruses: Time to bsod this computer and delete all files! New viruses: Oh look, a saved password for PayPal! Time to steal their money.

[@FluffyGameplay]

Both are still pretty bad, I'd say.

[@AngelaTheSephira]

@@FluffyGameplay But not as amazing to look at.

[@namesurname4666]

The first one is better because you can recover data

[@samuelrs5138]

These days they're doing both at once with cryptominer viruses. Take all your computers resources and render it useless, potentially damage your hardware if you don't get it fixed quickly enough and hike up your electricity bill while mining cryptocurrency for the hacker.

[@lampuhijau9900]

People is change

[@skigero8919]

Ah man this is so nostalgic. The first ever computer worm for me. Oh how the time flies.

[@ZilkenianDavenport]

My antivirus stopped Sasser B, but good lord...this thing is scary...

[@inactivechannel420]

+ZilkenianDagger My dads old computer had Sasser A

[@ZilkenianDavenport]

Asura the Latias ラティアス and you destroyed it? The virus, I mean

[@Crimson-qo4ii]

I have a old windows 7 virus which used to have more than 7 viruses and it was unusable, IE kept crashing when I loaded it and you couldn't download anti viruses or anything good, just more viruses. I had to reformat the drive and it runs normally now.

[@Agret]

I love the dedication to testing this one. Great worm. Love your channel.

[@arthurhenriqued.a.ribeiro2078]

Now I get why the name is Sasser. Because L-SASS.

[@playlist1027]

sassy

[@rebelfleettrooper9881]

Sassy, sassy, sassy!

[@rcv0]

Sissy

[@shrimppadh9316]

Old virus:I will kill your computer New virus: all I want is money don't care about your pc

[@mavamaarten]

Wow! I actually remember our old family PC having this virus too. We took it to the PC store and they gave us a floppy disk to fix it. That's a long time ago, damn!

[@MsMiDC]

Man i really miss the old youtube, was so much cleaner and better to navigate

[@AlJavier06]

Got this on my 9 year old Laptop, those were the years... of unsaved work xD

[@TheWaynelds]

Future viruses: You have 1 hour to give me $1000 before the battery in your laptop violently explodes.

[@therealinferno161]

The funny thing is that my laptop was recently, about 2 weeks ago, got taken down by a virus. It made some files run on 64-bit, therefore unbootable, and finally took out C:Windows/System32/boot?, or basically took out System32.

[@douro20]

A worm which devastated computer networks all over the world due to its bugginess.

[@Jusmir]

Remember running Shutdown -a or something and that shit is gone :D

[@donfisher6802]

Thats how I got around it.

[@axn630]

it can reappear and be a pain in the ass having to open up cmd.exe and type "shutdown -a" everytime the pop-up appears. tho yes youre right.

[@kirjian]

Today is April 30th! Happy 17th birthday, Sasser!

[@davidsucesso2419]

ok this was my first malware too.. was connecting first time my home to the internet and my windows 2000 got infected almost instantly after getting connection to the internet... on 2004 i was running an antivirus from 1999

[@davidsucesso2419]

ahhh i used shutdown -a command but the system continued slow

[@legitscoper3259]

David Sucesso really ? I thought a loop of " %windir%\system32\Shutdown.exe -a " will stop the Shutdown

[@Beansman-gp3ws]

Yeah he just said that

[@JaredtheRabbit]

Viruses in 1996: Goodbye, computer. Viruses in 2006: Ads in your web browser Viruses in 2016: MMMMOOOOOOONNNNNEEEEEEYYYYYY!!!

[@voxlvalyx]

I wish I was smart enough a long time ago to know what my first virus was. I didn't get my first computer until 2007 and I didn't know *anything* about them. All I remember is running a file and my computer just shutting off and refusing to boot. Essentially, the virus buttfucked my MBR and we stupidly took it in to get repaired. Now I work in IT and I wish I could have saved us $300 back then by fixing it myself. Other than that, the only other piece of malware I've ever gotten was sdtr.exe, a rootkit that can be pretty annoying to get rid of. Oh, and Conduit, but that's easy to pick up from anywhere.

[@ahniandfriends123]

Me, I got a Trojan horse that opened itself up as an ad that would not let you sign into AOL, our family uses that as a browser back then, unless you click on it (these ad things usually have a small button at the corner that says, 'No thanks'.) The ad was for a printer, nothing special. Then the next day we could not boot up the computer without it displaying the BSoD. (I used to think the blue screen ment 'system failure' until I saw the real message the computer would display if such thing happened.) My dad took it to the repair shop and the technician said that it was infected with a virus. If you think Conduit was bad, what might be your feelings towards TimeSink and Zango. (They pop up ads even if we weren't using the Internet and it made the fans overheat.)

[@wll1500]

Conduit and EasyLife are fucking annoying as hell

[@slipk0rvayne17]

this video was awesome. one of my fav that you put out. it was amazing to see the worm in action across many PCs over a network. going to school for this shit so it was a cool thing to actually see.

[@HerecomestheCalavera]

I think that sasser is the only virus I've ever really had to deal with. I think it was very largely spread

[@SpeedySPCFan]

2nd KZbinr I watch with a milestone recently. Congrats Dan. :D

[@dankpenguin4205]

old viruses: say byebye to your computer! mwhahahaha! new viruses: hello this is tech support how can i help you?

[@mrrfyW]

Nearly an 18 year anniversary.

[@DavidWonn]

I remember Sasser hitting at where I worked at the time. The XP machines all took a hit, but the NT4 boxes just chugged along without any issue.

[@AngelaTheSephira]

I'm somewhat surprised, to be honest. XP is based on NT, so that's a strange thing to have happen.

[@DavidWonn]

Although 2K and XP do indeed have their roots from NT 3.x and subsequently 4.0, they have enough differences (and more importantly, more open ports) that make them more vulnerable by default. One easy way to verify this back in the day was to run the Shields Up test at grc.com in various versions of Windows. You could also verify with netstat and other networking commands. As strange as it sounds, Windows 3.x would have no vulnerable ports open by default, 95 would have the next fewest, and so on as you move up the line in Windows releases. It was a mixed blessing that the company I worked at hadn’t yet migrated all their workstations from NT4 to XP. They also hadn’t yet migrated their servers from NT4 to 2000, and Server 2003 was still too new to be approved. I didn’t work directly for the teams that made these decisions, but having access to an NT4 box that fateful Saturday made it easier to research what was going on and forward what I found to the teams that needed to act fast. We also had some UNIX / Solaris boxes that naturally chugged along, and their IBM mainframes & midframes never flinched. That’s the power of diversifying!

[@stefamagep6606]

13:05 You can prevent an app running at startup using msconfig.exe right ?

[@zebo7574]

Nobody: My recommended: "Hello everyone, today I have a very special worm video for you."

[@enp82003]

I remember all the computers in my shop lab in high school got this. This brings back good memories. First real payload I had ever seen first hand.

[@blackroguegaming9358]

I remember this in highschool every computer on the network was infected SMH took us 4 months to get rid of it on every system

[@TegridyMadeGames]

Happy 15 years:)

[@invinciblespeed]

My first virus was a trojan I got after downloading a wallpaper of a llama. I don't know what the name of the trojan was, but it made my computer bluescreen after only a few minutes, and there were some error messages that I can't remember what they said. I was able to do a system restore after the bluescreen and everything was fine.

[@NTGTechnology]

Just came across an old HP Pavillion ze4400 that had the win2.log file with an invaild IP as well. Pretty cool finding a remnant of Sasser still on such an old machine out in the wild.

[@SebisRandomTech]

That CNN article was posted on my 5th birthday...

[@WamWooWam]

May the 4th be with you

[@drvonhogrus]

***** HA

[@doct]

It was 3 days after my 3rd birthday

[@crscot1322]

it was posted on my 14th birthday

[@LynxenX]

So you were born May 4th, 1999? Too young for youtube, reported

[@flaccidpringle]

i was an xp kid almost until windows 8 came out (the OS was damn well around as old as i am but we weren't as well-off back in the early noughties to tens as we are now) but sasser never got to me; didn't stop me from ruining my personal machine once or twice until i finally grew to be more savvy

[@1300l]

People still use HiJachThis, i also remember CastleCops, miss then.

[@bartashton]

I have a question, Dancoot. Did you set up a completely separate network for the computers on this test, or did you just use your existing connection but turn on the firewall on your regular computers (the computers not in the test) and install an antivirus as an extra precaution or something?

[@danooct1]

this is on its own isolated network running through a switch, you can see it resting on top of the laptop keyboards blinking away.

[@bartashton]

danooct1 Thanks.

[@kevincoffer2934]

Really, Dancoot?

[@fatlizard_]

Dankoct lol

[@fatlizard_]

***** you're wrong.

[@guitarraccoon1541]

Old viruses: Time to die! New viruses: WARNING: YOUR ZTE HAS BEEN INVECTED WITH A VIRUS. PRESS OK TO CONTINUE.

[@dcfuksurmom]

it isnt really infected, that is coded into the site you are on, clicking ok and installing its app is what will infect you

[@VeryScaryLarry2024]

this was the first ever virus we got in our local network in 2004. bitdefender was busy displaying how the worm was trying to access each and every pc on the network.

[@MikiSayakaFan]

Dan, awesome video on my birthday 3

[@Faria88]

This is nostalgic, because this was also my first virus! Good job on the video.

[@WindowsCollector]

4 XPs, one 2000. Why must everything have Windows XP?!

[@patpug6253]

WindowsCollector2000 cool icon

[@kalvinmorrison8662]

WindowsCollector2000 because it's cool

[@b2048_]

Common OS. That’s why

[@mats520]

Windows 2000 and XP are my two favourite Windows OS's. Especially when it comes to CPU's from before the NX and PAE CPU era

[@BubblegumLightsaber]

I remember getting this on our Windows XP family computer in the mid-2000s. Distinctly remember one instance when I was chatting with someone and the shutdown message popped up. That was a mad scramble :p (Also: I remember HijackThis, holy crap. Hadn't thought about that in years)

[@theairaccumulator7144]

you can make this video on a VMWare virtual box

[@F0undati0nsofD3cay]

I almost want to see what happens if it gets installed it on Windows 10

[@hantakorys]

Can you talk about dgen.exe virus?

[@Sypaka]

Oh... Dgen the SEGAEmulator, Dgen the bitcoin miner? Which one? However, if you harddrive has a Folder called: C:\Program Files\PCDApp\ taskkill the Dgen.exe and delete the dgen.exe inside. You can't delete programs while their running. next, open regedit, go to the path HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and delete the key pointing to dgen.exe. Reboot your stuff.

[@mewn-yf4qh]

Reverse engineering a patch from a recent update of *anything* to use against those on older versions is actually pretty smart. I wonder how frequently that little trick is used?

[@bonkmaykr]

When i first saw Lsass.exe is thought it said IsAss.exe

[@sarahfish891]

Great video as always, Dan. Nope, HijackThis is really outdated now and pretty much obsolete now. FRST is where it's at. Almost all the helpers on forums use that now or OTL if they are not caught up.

[@lhwhistler01]

Man, I can't imagine what would happen if say a school were to get this virus. Ouch.

[@green0ovrs]

Ouch! ikr

[@MiataDriverX]

I'll upload a video of that soon! Jk

[@aetd106]

+Gabe Griggs My school had a mix of XP and 2K back in 2004, I remember this happening in classrooms actually. NEver realised that this was why but it makes sense.

[@Krillington]

+Gabe Griggs Something similar happened to my school, about 15 years ago according to my IT teacher. Basically a student teacher came in and she put a disk into one of the pcs and then she said it didn't work. She did it another 2 times, then she realised she had infected every pc in the school. My IT teacher had to reinstall windows on every pc, and some pcs didn't work any more. Theres still 2 or 3 old junker pcs in my computer room. So it had definitely happened at least once. It was definitely not Sasser, as it would have infected the computers in either 1999 or 2000.

[@coolaquarums52]

+Aepsis m8 you are completely wrong Sasser was patched on XP and Vista+ is immune to it.

[@AwesomeGames56]

It's almost 12 years now!

[@DigiEggz]

When Sasser propagates to a new computer it finds, does it coordinate/delegate what IP range to start searching at? Or does each version of the worm just start with a random IP range? I'm curious as to how it splits up the workload.

[@someone-kw5os]

Worms enter a network and relies in security failure and vulnerabilitys, when it finds one vulnerability/failure on the security it enters.

[@Beansman-gp3ws]

That's like asking why is the sjy blue and then receiving the answer "the sky is blue" He's not asking what it does, he's asking how it does it

[@kokojack]

I remember building a new PC with a friend, we put Windows XP on it. It was an old version, so first thing we do is turn on ethernet and go to windowsupdate website. PC was infected in less than a minute. We had to reformat it. Good times haha

[@alka-holic]

Egh, not very tedious when a simple batch script can perform the removal process.

[@CozmixYT]

Fun fact: Sasser has a huge rivalry with Mydoom.

[@hikuro14]

Well done. Congratz to ten years.

[@Vasily12345]

He hasn't made his channel in 2004. In fact it is impossible, since youtube didn't exist back then.

[@looking_33]

he's talking about when he got interested in malware dumb fuck

[@Vasily12345]

Linkehh I'm not dumb, besides, why congratulate someone for being interested for a long period of time?

[@AKAProm]

***** because if he never became interested then we wouldn't be here watching his videos.

[@Vasily12345]

projackX Fine, I admit my stupidity. And I congratulate danooct1 as well.

[@dorukayhanwastaken]

13:49 can't you run lsass manually or shutdown from cmd.exe?

[@bellabarzan]

I did this to my school

[@magneticflux-]

Aren't you a wonderful little douchebag.

[@FAMICOMASTER]

GOOD JOB! :D

[@nobody0]

lol

[@FAMICOMASTER]

:D I probably shouldn't do this to my school, because they have a HUGE network that goes all the way out to canada, where it reaches their internet servers, and the computers are slow enought already XD

[@MIW_Renegade]

Antonio Barzan so did I and they couldn’t figure it out

[@crylune]

My first and last ever serious virus (so not PUPs or adware) was the ZeroAccess rootkit. Caused me to have to purge the disk and reinstall XP. At least it wasn’t CIH lol

[@davidkroft]

1990 : Spyware 2010 : Spamware (Ads)

[@oblivion2755]

Dqdqdadadarqhdajtajfware

[@bandito-fr]

I know this is two years in the future but I love this video

[@mt441pl]

Dan, plz dont resize your recordings to 1080p, everyone does it i know why, cause you cap'ed a part of the screen and can't be bothered, but it would be awesome if you recorded each clip in 1920x1080 so that in fullscreen we can enjoy seeing the crispiness as if it was happening live. Peace!

[@danooct1]

each clip *was* recorded in 1080p. i just use cheap point and shoot cameras because i can't justify spending $500+ on a quality camcorder on what amounts to a hobby.

[@sleepingwitdemons3666]

+danooct1 I agree

[@mt441pl]

sorry, my mistake, by 'happening live' i meant that i wanted to see each pixel 1:1, sorry for my grammar.

[@epichalomastersnipergod1337]

crispy

[@mt441pl]

@@danooct1 late reply + necro but i meant the screen capture using software, a lot of your videos were native 720p at one point,

[@andresz1606]

I was there, Gandalf. I was there three thousand years ago. This virus was the most annoying I ever experienced because at the time no one even knew how to abort the shutdown and panic was widespread.

[@ayylmao5447]

just type in the CMD (Command Prompt) shutdown -a to stop the shutdowning

[@joshdemir5896]

It probably wouldn't have let you do that, as LSASS crashed, so you no longer have permissions to run the shutdown command.

[@ayylmao5447]

***** he already did it , look at 12:31

[@realcomputerdude100]

Tolga Beytula So why did you put in the comments? xD

[@ayylmao5447]

idk xD

[@ebbiesoup1862]

thecomputerman100 he Posted the comment before watching the whole video

[@kurbusmax]

“the computer becomes practically unusable” welcome to the club

[@AllHaiLKINGTIsHeRe3]

Likes 3,333 Dislikes: 33 Wow, first of all how could there be so few dislikes? I mean this is like unheard of for me, and secondly what a coincidence.

[@Vostok7]

Everybody gangster until Task Manager is no longer responding.