Sasser worm

Discussion in 'Computer Support' started by Gareth not NLL or anybody else., May 1, 2004.

  1. New worm about
    W32/Sasser-A, Sasser, W32/Sasser.worm, Win32.Sasser.A, W32.Sasser.Worm

    This worm exploits the Windows LSASS vulnerability, which is a buffer
    overrun that allows remote code execution and enables an attacker to gain
    full control of the affected system. This vulnerability is discussed in
    detail in the following pages: To propagate, it scans the network for
    vulnerable systems. When it finds a vulnerable system, this malware sends a
    specially crafted packet to produce a buffer overflow on LSASS.EXE. Since
    this malware produces a buffer overflow in LSASS.EXE, it causes the said
    program to crash and will consequently require Windows to reboot.


    This is the patch to protect windows xp(with sp1) from the above attack
    http://www.microsoft.com/downloads/...9E-DA3F-43B9-A4F1-AF243B6168F3&displaylang=en

    Removal instructions can also be found here
    http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SASSER.A

    Hope this helps

    Gaz
    Gareth not NLL or anybody else., May 1, 2004
    #1
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Alasdair Baxter

    Sasser Worm.

    Alasdair Baxter, May 2, 2004, in forum: Computer Support
    Replies:
    3
    Views:
    529
    Alasdair Baxter
    May 3, 2004
  2. Pistol Pete

    Worm/Sasser.C

    Pistol Pete, May 4, 2004, in forum: Computer Support
    Replies:
    12
    Views:
    908
    °Mike°
    May 4, 2004
  3. WCH

    Sasser worm? Can't even log on to W2k

    WCH, May 6, 2004, in forum: Computer Support
    Replies:
    5
    Views:
    710
    Ron Martell
    May 7, 2004
  4. Classic 42

    Help please with Sasser Worm

    Classic 42, May 10, 2004, in forum: Computer Support
    Replies:
    8
    Views:
    544
    °Mike°
    May 10, 2004
  5. Brett Roberts

    Removal tool for Sasser.A & Sasser.B

    Brett Roberts, May 2, 2004, in forum: NZ Computing
    Replies:
    2
    Views:
    317
    MikeN
    May 14, 2004
Loading...

Share This Page