Cable Forum

Cable Forum (https://www.cableforum.uk/board/index.php)
-   Security & Virus Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=38)
-   -   [Merged] W32/Sasser.worm (https://www.cableforum.uk/board/showthread.php?t=11803)

Paul 01-05-2004 19:58

[Merged] W32/Sasser.worm
 
FYI;

Quote:

Advisory
This is a Medium Threat Advisory for W32/Sasser.worm

Justification
W32/Sasser.worm has been deemed Medium due to prevalence

Read About It
Information about W32/Sasser.worm is located on VIL at:
http://vil.nai.com/vil/content/v_125007.htm

Detection
W32/Sasser.worm was first discovered on 30/04/2004 and detection will be added to the 4355 dat files (Release Date: 01/05/2004). The EXTRA.DAT is available.
This exploits a hole covered in the latest MS patch - MS04-011.

Alan Waddington 01-05-2004 20:03

Re: W32/Sasser.worm
 
Thanks for the heads up. I've really got to watch the viruses at the moment because someone who has me in their address book has got a NetSky & i keep being gifted with them

Well, Sasser's in my normal virus update i got today from norton, so no need to manually install the extra definitions.

DrAwesome 03-05-2004 11:41

Re: W32/Sasser.worm
 
This Link may be useful to someone :0)

50420 04-05-2004 21:39

sasser worm...have ntl blocked these ports?
 
hi all....apologies if this is being discussed elsewhere...but couldnt find the subject when searched the forums.

just a queery really regarding the sasser alert on the ntl homepage
http://www.ntlworld.com/help/aup/virus_sasser.php

going by the wording of the alert...it sounds as if the relevant ports have been blocked??

more info here on sasser http://securityresponse.symantec.com...er.b.worm.html

only reason i'm askin is cos of a thread on the computeractive forums.....where a poster has accused ntl of crass incompetance and stupidity for informing thier customers that they are not susceptible to sasser. (this aint what is stated in the alert though !!!!) the alert states that MOST ntl cusomers SHOULD not be susceptible to it due to proactive measures.

MadGamer 04-05-2004 21:44

Re: sasser worm...have ntl blocked these ports?
 
I know M$ have a patch but i can't find it.

BizBo 04-05-2004 21:51

Re: sasser worm...have ntl blocked these ports?
 
Patch from Microsoft :shocked:

jellybaby 04-05-2004 21:53

Re: sasser worm...have ntl blocked these ports?
 
And Here is quite useful too

philip.j.fry 04-05-2004 21:55

Re: [Merged] W32/Sasser.worm
 
And what a pain this virus is, it infected the uni computer system this morning just as I was giving a demonstration of my dissertation project so the computer kept crashing :(

Tezcatlipoca 04-05-2004 21:56

Re: sasser worm...have ntl blocked these ports?
 
Quote:

Originally Posted by 50420
hi all....apologies if this is being discussed elsewhere...but couldnt find the subject when searched the forums.

I've merged your thread with the Sasser thread in the Security forum ;) :)

Quote:

just a queery really regarding the sasser alert on the ntl homepage
http://www.ntlworld.com/help/aup/virus_sasser.php
Don't know if NTL have blocked the ports. Maybe one of our NTL-employed members will be able to answer that.

Paul 04-05-2004 21:58

Re: sasser worm...have ntl blocked these ports?
 
Quote:

Originally Posted by WNA
I know M$ have a patch but i can't find it.

The patches are in the "Latest Microsoft Patches" announcement in the Computers & Technology forums (at the top of the topics list). :)

porpoise 07-05-2004 17:36

sassa worm
 
I got the sassa worm !!! My son wnet onto symantec and downloaded the removal tool for me. I've now got rid of it. I went on to windows update and It said download this update to stay clear of the sassa worm, I checked my history and i'd downloaded it on April 14th !!! Also my son said that I can go into msconfig and get Zonealarm to start earlier in the start up menu ??? how ???

byron_hinson 07-05-2004 18:05

Re: [Merged] W32/Sasser.worm
 
I've noticed CPU Spikes when I am connected to the internet over the last 2 days - any ideas if this is the virus looking for IP Addresses - my machines and clean and all up to date, just can't figure this one out.

Chris W 07-05-2004 18:38

Re: [Merged] W32/Sasser.worm
 
Quote:

Originally Posted by byron_hinson
I've noticed CPU Spikes when I am connected to the internet over the last 2 days - any ideas if this is the virus looking for IP Addresses - my machines and clean and all up to date, just can't figure this one out.

when you say connecting to the internet, is that using a dial or BB connection? and what exactly do you mean by connecting to the internet? is it opening IE? or any program?

byron_hinson 07-05-2004 19:22

Re: [Merged] W32/Sasser.worm
 
Wireless broadband. Don't have to be running any programs at all for it to show up the problem. if i switch off the wireless connection then everything is fine.

Chris W 08-05-2004 09:20

Sasser Virus Arrest
 
Just heard that someone has been arrested for the Sasser virus....

not much news yet, just breaking on news24. 18 year old from Germany who wrote and activated that virus on his own.

Good to see that the person responsible has been caught :tu:


All times are GMT. The time now is 08:09.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum