TheTechGuide Forum

General Category => Tech Clinic => Topic started by: Jamie on May 08, 2004, 06:34:37 AM

Title: W32.Sasser.Worm
Post by: Jamie on May 08, 2004, 06:34:37 AM

A huge threat that has recently broke out is the Sasser Worm. Millions of computers in global companies have been shutting down time after time, causing huge train and sometimes aeroplane delays. I just thought I would help you find out if you are infected.
Obviously check that you anti-virus is completely up to date first.

W32.Sasser.Worm can run on (but not infect) Windows 95/98/Me computers. Although these operating systems cannot be infected, they can still be used to infect the vulnerable systems to which they are able to connect. In this case, the worm will waste a lot of resources so that programs cannot properly run.

Also Known As:  W32/Sasser.worm [McAfee], WORM_SASSER [Trend], Worm.Win32.Sasser.a [Kaspersky], W32/Sasser-A [Sophos]
 
Type:  Worm
Infection Length:  15,872 bytes
 
 
 
Systems Affected:  Windows 2000, Windows XP
Systems Not Affected:  DOS, Linux, Macintosh, Novell Netware, OS/2, UNIX, Windows 3.x, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003

(This information from Symantec)

Microsoft are also worried about the worm too. Click Here (http://\"http://www.microsoft.com/security/incident/sasser.asp\") to visit the Microsoft page on the worm.

Microsoft explains about a fix they have for the worm. So make sure you use Windows Update and install the critical updates straight away just in case. But use the detailed method on the website above if you are comfortable with the registry. It may also be a good idea to follow this method incase the worm is remade to bypass the fix.

Hope this helps anyone with the problem. I downloaded the patch anyway just in case.

Thx   /smile.gif\' class=\'bbc_emoticon\' alt=\':)\' />