Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 92031 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

W32.sasser Removal Tool Available!


  • Please log in to reply
5 replies to this topic

#1 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 03 May 2004 - 06:07 PM

FYI...

W32.Sasser Removal Tool
- http://www.sarc.com/...moval.tool.html
Last Updated on: May 3, 2004 04:16:26 PM
(The tool covers variants of the Sasser Worm)

Additional info:
- http://www.sarc.com/...ser.c.worm.html
"...Block TCP ports 5554, 9996 and 445 at the perimeter firewall and install the appropriate Microsoft patch (MS04-011) to prevent remote exploitation of the vulnerability..."
- http://isc.sans.org/...ls.php?port=445

Also:
- http://isc.sans.org/...date=2004-05-03
"...We are seeing a great deal of evidence of multiple infections on machines with Sasser. That is, machines infected with Sasser are often also infected with something else, frequently one of the recent agobot/gaobot/phatbot variants that also target the MS04-011 vulnerabilities..."
- http://www.microsoft...n/MS04-011.mspx

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.

    Advertisements

Register to Remove


#2 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 05 May 2004 - 04:28 AM

FYI...

What You Should Know About the Sasser Worm and Its Variants
- http://www.microsoft...dent/sasser.asp
Updated: May 4, 2004 - 9:55 P.M. Pacific Time
"...If your computer keeps shutting down, print these instructions..."

.

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#3 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 06 May 2004 - 04:51 PM

FYI...

- http://www.techweb.c...WB20040505S0007
May 5, 2004
"...While Sasser's growth is slowing, businesses and consumers shouldn't drop their guard, or fail to patch still-vulnerable systems. And there's more cherry news in the future. The next scheduled roll-out of Microsoft vulnerabilities -- "Black Tuesday", as it's called by some security experts, since the Redmond, Wash.-based developer uses the second Tuesday of each month to post patches -- is just six days away."

...now 5, and counting. :(

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#4 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 10 May 2004 - 05:04 AM

FYI...

Sasser.E
- http://www.sarc.com/...valinstructions
"...What to do if the computer shuts down before you can patch...
(You may have to try this several times, as you only have about 20 seconds to do steps 3 to 6.)..."

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#5 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 11 May 2004 - 07:53 PM

The Removal Tool has been updated to include Sasser.E (see first post in this thread for URL link):
Last Updated on: May 10, 2004 04:13:41 PM PDT

...but of course, now we have Sasser.F - Arrgghh! :rant2:
- http://www.sarc.com/...ser.f.worm.html

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#6 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 13 May 2004 - 05:19 AM

First up with an updated Removal Tool that includes Sasser.F is...

"File Name: Windows-KB841720-ENU-V4.exe
Download Size: 114 KB
Date Published: 5/11/2004
Version 4.0 - Released 5/11/04. Added detection/removal for Sasser.F"
- http://www.microsoft...&DisplayLang=en

.

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users