Sasser Worm - take steps (Full Version)

Foro Flamenco: http://www.foroflamenco.com/
- Discussions: http://www.foroflamenco.com/default.asp?catApp=0
- - General: http://www.foroflamenco.com/in_forum.asp?forumid=13
- - - Sasser Worm - take steps: http://www.foroflamenco.com/fb.asp?m=8892



Message

Escribano -> Sasser Worm - take steps (May 4 2004 12:57:17)

Microsoft has issued free advice and tools to defend your computer from the Sasser worm http://www.microsoft.com/security/incident/sasser.asp



Billyboy -> RE: Sasser Worm - take steps (May 5 2004 12:25:02)

How would one get the virus Simon, through attachments etc
Cheers
Dave



Escribano -> RE: Sasser Worm - take steps (May 5 2004 12:32:58)

Nope, it's independent of attachements or email. It attacks your computer directly, without a firewall and latest Windows updates you could be at risk.



Fergusito -> RE: Sasser Worm - take steps (May 5 2004 14:34:54)

Our Server computer was attacked last night in the cafe where I work luckily the antivirus stopped it from doing any real harm otherwise it would have been really bad news!!!



Billyboy -> RE: Sasser Worm - take steps (May 5 2004 18:59:59)

But how do you get it? just surfing, and what kind of web sites, I heard it on attacks Win 2000 and XP is that right, and mainly if you have broadband
Cheers
Dave



Guest -> RE: Sasser Worm - take steps (May 5 2004 19:03:41)

2000 and XP, just being on-line without the right patches. Doesn't matter about broadband, if you have an IP address, which you have, it can try attack you. Though your ISP may also maintain a firewall.
Simon



Billyboy -> RE: Sasser Worm - take steps (May 5 2004 21:15:19)

Thanks, but how does it get into your computer without downloading something? Also is it only 2000 and XP, and If so, I though 2000 is basically 98 se
Cheers
Dave



Escribano -> RE: Sasser Worm - take steps (May 6 2004 8:14:30)

It does download something, you don't have to...
quote:

W32/Sasser-A attempts to connect to computers through ports TCP/9996 and TCP/445. If the Windows computers are not patched against the LSASS vulnerability, an FTP script is downloaded and executed, which connects to port 5554 and downloads a copy of the worm via FTP (File Transfer Protocol).


You don't need to download anything to be attacked. Whilst on the Internet, without appropriate cloaking via a firewall and latest updates, you are always at risk. If you are on dial-up your ISP should be running a firewall of sorts but they don't know what ports you want to open up for gaming, messaging, web cam etc. so you should at least run a software firewall.

Windows 2000 is not anything like Windows 98, it is based on Windows NT technology.



Page: [1]

Valid CSS!




Forum Software powered by ASP Playground Advanced Edition 2.0.5
Copyright © 2000 - 2003 ASPPlayground.NET