Results 1 to 3 of 3

Thread: sasser worm

  1. #1
    The Beast Master TZ Veteran PIPER's Avatar
    Join Date
    May 2002
    Location
    Florida
    Posts
    1,180

    sasser worm

    sasser worm

    --------------------------------------------------------------------------------

    Hi people, Bink here. This is an alert to warn you about a new worm that is fast spreading in the Internet and exploiting a vulnerability that was discovered in Microsoft Windows last month.

    Make sure your systems are patched with all the latest security patches and specially Microsoft Security Update MS04-011. Go to Windows Update to update your systems.
    Hope this helps preventing infection and further spreading, make sure to forward this email to people who you think need to get this info (everybody connected to the Internet!)


    OK that's it, Make sure you keep visiting my website http://bink.nu for the latest Microsoft news and downloads or visit Bink.nu forums for support on you Windows issues, deployments and Boot cd's.

    Microsoft teams and law enforcement authorities are investigating reports of a worm, identified as W32.Sasser.worm, that is currently circulating on the Internet. Microsoft has verified that the worm exploits the Local Security Authority Subsystem Service (LSASS) issue fixed in Microsoft Security Update MS04-011 on April 13, 2004.

    If your computer is infected with W32.Sasser.worm, you may see a dialog box with text that refers to LSASS.exe. Some customers whose computers have been infected may not notice the presence of the worm at all, while others who are not infected may experience problems because the worm is attempting to attack their computer. Typical symptoms may include systems rebooting every few minutes without user input.

    Just got this email today and thought I would pass it along.

  2. #2
    Junior Member
    Join Date
    Apr 2003
    Posts
    10
    Removal Tool:

    http://securityresponse.symantec.com...oval.tool.html Or http://vil.nai.com/vil/stinger

    Patch and Alert from MS:

    http://www.microsoft.com/security/incident/sasser.asp



    Varient.B is around now. SANS have set the alert level at yellow.

    The amount its seen in the wild has jumped rapidly over the weekend. On Saturday morning F-Secure said "we aren't seeing massive amounts of infections. Not yet anyway." They did however predict this would happen as unpatched home users go online.
    Last edited by Enyo; May 2nd, 2004 at 09:09 AM.

  3. #3
    Super Moderator Super Moderator Big Booger's Avatar
    Join Date
    Apr 2002
    Location
    JAPAN
    Posts
    10,941
    http://techzonez.com/forums/showthread.php?t=9814

    MS issued a fix for it already.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •