Page 1 of 2

sasser worm...

Posted: Mon May 03, 2004 2:16 pm
by pawlee

Posted: Mon May 03, 2004 2:18 pm
by Rainband
I would like to have 5 minutes with the idiots who create these things!!! :x

Posted: Mon May 03, 2004 2:22 pm
by stormraiser
I saw this earlier. It's supposed to be easier to catch than the last one.

Posted: Mon May 03, 2004 2:22 pm
by pawlee
i'd like to have their knowledge... could you imagine how cool it would be to write self replicating worms that neutralize the bad ones? if someone did that, they'd be sooo rich. p

Posted: Mon May 03, 2004 2:25 pm
by pawlee
stormraiser wrote:I saw this earlier. It's supposed to be easier to catch than the last one.


i was looking to see if anyone posted on this matter. sorry for the double posting, i missed the original one.

Posted: Mon May 03, 2004 2:43 pm
by streetsoldier
In addition to my Norton updates, Microsoft has a patch available to take care of this particular problem. I'm going there now to download it.

Posted: Mon May 03, 2004 2:46 pm
by stormraiser
Pawlee, I didn't see it here. I don't think anyone else posted it.

Posted: Mon May 03, 2004 2:57 pm
by pawlee
stormraiser wrote:Pawlee, I didn't see it here. I don't think anyone else posted it.


(oh... ok. well, here's the message i got from SBC, this is legit.)

Dear SBC Internet Services Member:

This is an extremely important update to an e-mail SBC sent you 04/30/04 or 05/01/04. It is extremely important you read this message and take immediate action if you are using Windows NT, 2000, 2003 or XP.

In addition to a computer worm referred to as Gaobot or Agobot, that is currently infecting computers across the Internet, there is now another computer worm, known as Sasser, that is spreading across the Internet, exploiting the same apparent security vulnerability in these Microsoft Windows operating systems. In response, we strongly urge you to immediately take the following security measures:

1) Use a personal software or hardware firewall to protect your computers from network worms and intruders.
2) Download and install all available critical patches for your Windows operating system from the Microsoft web site: http://windowsupdate.microsoft.com/
3) Use up-to-date anti-virus software to detect and remove Gaobot and Sasser or other computer worms and viruses.

It is extremely important you take these measures now because it’s likely you will not be able to take these measures if your computer becomes infected.

If you have more than one computer using these specific Windows operating systems, you should perform these actions on all suchcomputers that connect to the Internet. Failure to take appropriate action could result in infection of your system, slow browsing or the inability to connect to the Internet and spread of this problem - and could lead to suspension of your account.

Because computer worms do not spread by email, you may have little or no warning before your computers are infected.

Users whose computers are infected with Sasser should follow the worm removal instructions at: http://www.microsoft.com/security/incident/sasser.asp , or if infected with Gaobot, follow the worm removal instructions at: http://securityresponse.symantec.com/av ... .tool.html .

If you are unable to connect to the Windows Update or Anti-Virus web sites, in order to download the removal tools or the patches for Windows and your anti-virus software, please contact Microsoft at 866-PCSAFETY or 866-727-2338.

SBC Yahoo! members can access additional information about SBC Yahoo! security features, including free anti-virus and personal firewall, at http://help.sbcglobal.net/ . Further information is available at http://www.microsoft.com/security/protect/ .

Thank you,

SBC Internet Services

About SBC Internet Services Security Alerts

SBC Internet Services sends notices about security updates after we publish information about them on our website. If you are ever in doubt about the authenticity of an email claiming to be an SBC Internet Services Security Alert, check http://help.sbcglobal.net/ to confirm if the Alert is listed. Go to the Alert section in the left hand column of the home page and look under the bullet which references this email.

Posted: Mon May 03, 2004 3:10 pm
by streetsoldier
Apparently, I'm OK; the Microsoft site ddin't have any critical updates for me, and Norton has isolated two versions of the Sasser worm in my present "definitions".

Those who hava anti-virus on their PCs should go daily to get the latest updates, or perhaps even more frequently, IMHO.

Posted: Mon May 03, 2004 3:24 pm
by Rainband
I update mine twice a day Bill. These days can't be too careful :wink:

Posted: Mon May 03, 2004 4:33 pm
by JQ Public
pawlee wrote:i'd like to have their knowledge... could you imagine how cool it would be to write self replicating worms that neutralize the bad ones? if someone did that, they'd be sooo rich. p



Thats why companies normally hire their hackers. Helps both parties i guess?!

Posted: Mon May 03, 2004 5:42 pm
by PTrackerLA
I'm doing a windows update right now, thanks for the info!

Posted: Mon May 03, 2004 5:52 pm
by stormraiser
I've been hit with another one that is going around. I never have had problems with these things, but I received one yesterday and today. I updated twice today :eek:

Posted: Wed May 05, 2004 4:06 pm
by therock1811
I got NAILED at home and am @ the library now...

Posted: Wed May 05, 2004 4:32 pm
by furluvcats
Downloading patches now. Thanks for the "heads up".

Posted: Wed May 05, 2004 4:36 pm
by Rainband
anybody with an cable internet, needs a router with a built in firewall. I have one and another firewall to boot can't be too careful these days. One anti virus is enough. They conflict if you have two. :wink:

Posted: Wed May 05, 2004 8:22 pm
by stormchazer
I have a client who got slammed by this worm today. Gotta love it!

Posted: Wed May 05, 2004 8:30 pm
by Lindaloo
What does the worm do to your PC?

Posted: Wed May 05, 2004 8:39 pm
by stormraiser
It makes you post 1500 posts a day at Storm2k :roll:


I think KC's computer has a double infection

Posted: Wed May 05, 2004 8:41 pm
by Wnghs2007
So then it makes you become me SR...LOL..JOking.

My dads school computers that were XP 25 all got wiped out by the sasser.b worm...and he is having to go around to all of them and fix them.That really sucks, stayed there to 10:30 Pm the other night after getting there at 6:45 Am in the morning