Page 1 of 1

Sasser worm warning

PostPosted: Tue May 04, 2004 8:27 am
by Mithrandir
OK. There's been another one of those worms going around again. This one is NOT spread by using email. It's spread by leaving your WinXP or Win2K box connected to the internet. If you get weird reboots, it's possible you need this...

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

Someone wanna give it to Aaron?

PostPosted: Tue May 04, 2004 9:18 am
by Vyse
Youch, if I have a router I should be protected, right?

PostPosted: Tue May 04, 2004 9:54 am
by Mithrandir
Yes... Provided yiou haven't told your router to forward any traffic through it...

PostPosted: Thu May 06, 2004 3:41 pm
by ShiroiHikari
I feel like this thread needs a bump.

A -lot- of people seem to be getting infected with Sasser. Do yourself a favor...go to the Symantec link oldphil gave in the first post. Download the fix file now, and it probably wouldn't hurt to burn the file to a CD or save it to a floppy. It's a pretty small file, it won't take long to download.

PostPosted: Fri May 07, 2004 2:37 am
by ThaKladd
Hehe, Many insurance companies here in Norway got blackout because of Sasser. They had good firewalls, bet the virus came trough laptops. The virus entered directly and infected all the computers because there was no firewall inside the LAN..... :grin:

PostPosted: Fri May 07, 2004 2:57 pm
by Kovyn Alander
Holy cow! Lol, that's terrible Kladd. Man, this worm is being a real bugger.

PostPosted: Fri May 07, 2004 5:00 pm
by madphilb
Hey, just wondering... it seems like this thing is leaving Win98 alone.... should I worry?

PostPosted: Sat May 08, 2004 7:21 am
by Mithrandir
Theoretically, you're safe. The probablem is that the next varient could very well target 98 specifically.

And, TK: We had a similar incident happen where I work a while back. The DHCP server has been shutdown when these things happen now, and when someone calls to complain, they are told to bring in their machine for innoculation.

PostPosted: Tue May 11, 2004 11:19 pm
by Fsiphskilm
They arested