Sasser worm warning

The geek forum. PHP, Perl, HTML, hardware questions etc.. it's all in here. Got a techie question? We'll sort you out. Ask your questions or post a link to your own site here!
Post a reply

Sasser worm warning

Postby Mithrandir » Tue May 04, 2004 8:27 am

OK. There's been another one of those worms going around again. This one is NOT spread by using email. It's spread by leaving your WinXP or Win2K box connected to the internet. If you get weird reboots, it's possible you need this...

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

Someone wanna give it to Aaron?
User avatar
Mithrandir
 
Posts: 11071
Joined: Fri Jun 27, 2003 12:00 pm
Location: You will be baked. And then there will be cake.
Top

Postby Vyse » Tue May 04, 2004 9:18 am

Youch, if I have a router I should be protected, right?
User avatar
Vyse
 
Posts: 691
Joined: Tue Feb 24, 2004 10:00 am
Location: USA
Top

Postby Mithrandir » Tue May 04, 2004 9:54 am

Yes... Provided yiou haven't told your router to forward any traffic through it...
User avatar
Mithrandir
 
Posts: 11071
Joined: Fri Jun 27, 2003 12:00 pm
Location: You will be baked. And then there will be cake.
Top

Postby ShiroiHikari » Thu May 06, 2004 3:41 pm

I feel like this thread needs a bump.

A -lot- of people seem to be getting infected with Sasser. Do yourself a favor...go to the Symantec link oldphil gave in the first post. Download the fix file now, and it probably wouldn't hurt to burn the file to a CD or save it to a floppy. It's a pretty small file, it won't take long to download.
fightin' in the eighties
User avatar
ShiroiHikari
 
Posts: 7564
Joined: Wed May 28, 2003 12:00 pm
Location: Somewhere between 1983 and 1989
Top

Postby ThaKladd » Fri May 07, 2004 2:37 am

Hehe, Many insurance companies here in Norway got blackout because of Sasser. They had good firewalls, bet the virus came trough laptops. The virus entered directly and infected all the computers because there was no firewall inside the LAN..... :grin:
We in our foolishness thought we were wise
He played the fool and He opened our eyes
We in our weakness believed we were strong
He became helpless to show we were wrong
- Michael Card
User avatar
ThaKladd
 
Posts: 355
Joined: Fri Nov 28, 2003 4:41 am
Location: Norway
Top

Postby Kovyn Alander » Fri May 07, 2004 2:57 pm

Holy cow! Lol, that's terrible Kladd. Man, this worm is being a real bugger.
One day an old man, Jesus and Moses were out playing golf. Moses hit the ball and it landed in a pond. Moses then raised his hands and parted the waters of the pond and struck his ball out from the bottom and walked out and the let the waters back down to normal. Jesus hit his ball and it landed in the same pond. So Jesus walked out onto the water. His ball floated up to the top and was then hit from atop the water to land on the green. The old man swung his club and hit his ball. It was headed for the same little pond but as it was about to splash down a frog appeared and swallowed the ball. At that same moment an eagle came down and snatched the frog. The eagle flew above course over to the green and dropped the frog next to the hole. The frog then spit the ball out into the hole for a hole-in-one. Jesus turned to the old man and said "Dad, if you don't quit doing that, we're not going to let you play with us anymore."

Image
User avatar
Kovyn Alander
 
Posts: 74
Joined: Mon Mar 08, 2004 10:20 am
Location: Where the AF sends me.
Top

Postby madphilb » Fri May 07, 2004 5:00 pm

Hey, just wondering... it seems like this thing is leaving Win98 alone.... should I worry?
PHIL

Image
Member of P.I.E. -- Pictures of Inkhana for Everyone!! Join the fight!!
Image
User avatar
madphilb
 
Posts: 1057
Joined: Thu May 29, 2003 1:46 pm
Location: Sunny St. Pete, FL
Top

Postby Mithrandir » Sat May 08, 2004 7:21 am

Theoretically, you're safe. The probablem is that the next varient could very well target 98 specifically.

And, TK: We had a similar incident happen where I work a while back. The DHCP server has been shutdown when these things happen now, and when someone calls to complain, they are told to bring in their machine for innoculation.
User avatar
Mithrandir
 
Posts: 11071
Joined: Fri Jun 27, 2003 12:00 pm
Location: You will be baked. And then there will be cake.
Top

Postby Fsiphskilm » Tue May 11, 2004 11:19 pm

They arested
I'm leaving CAA perminantly. i've wanted to do this for a long time but I've never gathered the courage to let go.
User avatar
Fsiphskilm
 
Posts: 3853
Joined: Mon Nov 03, 2003 12:00 pm
Location: USA
Top
Post a reply

Return to Computing and Links

Who is online

Users browsing this forum: No registered users and 172 guests

Powered by phpBB® Forum Software © phpBB Group
 

Loading

Please wait.