Sasser Worm - take steps

Costs are rising and times are tough.
Please consider a donation to keep this
place going.

Welcome to one of the most active flamenco sites on the Internet. Guests can read most posts but if you want to participate click here to register.

This site is dedicated to the memory of Paco de Lucía, Ron Mitchell, Guy Williams, Linda Elvira, Philip John Lee, Craig Eros, Ben Woods, David Serva and Tom Blackshear who went ahead of us.

We receive 12,200 visitors a month from 200 countries and 1.7 million page impressions a year. To advertise on this site please contact us.

You are logged in as Guest

Users viewing this topic: none

Printable Version

All Forums >>Discussions >>General >>

Page: [1]

Message

<< Newer Topic Older Topic >>

Escribano

Posts: 6415
Joined: Jul. 6 2003
From: England, living in Italy

Sasser Worm - take steps

Microsoft has issued free advice and tools to defend your computer from the Sasser worm http://www.microsoft.com/security/incident/sasser.asp

_____________________________

Foro Flamenco founder and Admin

REPORT THIS POST AS INAPPROPRIATE | Date May 4 2004 12:57:17

Billyboy

Posts: 389
Joined: Aug. 18 2003

RE: Sasser Worm - take steps (in reply to Escribano)

How would one get the virus Simon, through attachments etc
Cheers
Dave

REPORT THIS POST AS INAPPROPRIATE | Date May 5 2004 12:25:02

Escribano

Posts: 6415
Joined: Jul. 6 2003
From: England, living in Italy

RE: Sasser Worm - take steps (in reply to Billyboy)

Nope, it's independent of attachements or email. It attacks your computer directly, without a firewall and latest Windows updates you could be at risk.

_____________________________

Foro Flamenco founder and Admin

REPORT THIS POST AS INAPPROPRIATE | Date May 5 2004 12:32:58

Fergusito

Posts: 206
Joined: Jul. 11 2003
From: UK

RE: Sasser Worm - take steps (in reply to Escribano)

Our Server computer was attacked last night in the cafe where I work luckily the antivirus stopped it from doing any real harm otherwise it would have been really bad news!!!

REPORT THIS POST AS INAPPROPRIATE | Date May 5 2004 14:34:54

Billyboy

Posts: 389
Joined: Aug. 18 2003

RE: Sasser Worm - take steps (in reply to Escribano)

But how do you get it? just surfing, and what kind of web sites, I heard it on attacks Win 2000 and XP is that right, and mainly if you have broadband
Cheers
Dave

REPORT THIS POST AS INAPPROPRIATE | Date May 5 2004 18:59:59

Guest

RE: Sasser Worm - take steps (in reply to Billyboy)

2000 and XP, just being on-line without the right patches. Doesn't matter about broadband, if you have an IP address, which you have, it can try attack you. Though your ISP may also maintain a firewall.
Simon

REPORT THIS POST AS INAPPROPRIATE | Date May 5 2004 19:03:41

Billyboy

Posts: 389
Joined: Aug. 18 2003

RE: Sasser Worm - take steps (in reply to Guest)

Thanks, but how does it get into your computer without downloading something? Also is it only 2000 and XP, and If so, I though 2000 is basically 98 se
Cheers
Dave

REPORT THIS POST AS INAPPROPRIATE | Date May 5 2004 21:15:19

Escribano

Posts: 6415
Joined: Jul. 6 2003
From: England, living in Italy

RE: Sasser Worm - take steps (in reply to Billyboy)

It does download something, you don't have to...

quote:

W32/Sasser-A attempts to connect to computers through ports TCP/9996 and TCP/445. If the Windows computers are not patched against the LSASS vulnerability, an FTP script is downloaded and executed, which connects to port 5554 and downloads a copy of the worm via FTP (File Transfer Protocol).

You don't need to download anything to be attacked. Whilst on the Internet, without appropriate cloaking via a firewall and latest updates, you are always at risk. If you are on dial-up your ISP should be running a firewall of sorts but they don't know what ports you want to open up for gaming, messaging, web cam etc. so you should at least run a software firewall.

Windows 2000 is not anything like Windows 98, it is based on Windows NT technology.

_____________________________

Foro Flamenco founder and Admin

REPORT THIS POST AS INAPPROPRIATE | Date May 6 2004 8:14:30