New Worm Sasser (IMPORTANT).

Hate

Guest
New Worm Sasser & Sasser.B(IMPORTANT).

New worm out there its very evil.

The Name of the new worm is: Sasser


It's been given a "high" ranking of security risk!!!!!


View Symantec's file on this worm:

http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html


Microfost's fix:

http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx


Virus first found on April 13th!

Use win update + Antivirus update.


If u have the virus -

use the ctrl+alt+del

Under processes, End process udner the name: avserv

Now start updating the antivirus and windows .

Mind u Read Norton's reply to this - u should also delete reg keys if u are hit

=========================================================
VARIENT B

W32.Sasser.B.Worm

Discovered on: May 01, 2004
Last Updated on: May 02, 2004 02:34:21 PM

W32.Sasser.B.Worm is a variant of W32.Sasser.Worm. It attempts to exploit the LSASS vulnerability described in Microsoft Security Bulletin MS04-011, and spreads by scanning randomly-chosen IP addresses for vulnerable systems.
--------------------------------------------------------------------------------
Notes:
The MD5 hash value for this worm is 0x1A2C0E6130850F8FD9B9B5309413CD00.
Symantec Security Response has developed a removal tool to clean the infections of W32.Sasser.B.Worm.
--------------------------------------------------------------------------------
Variants: W32.Sasser.Worm
Type: Worm
Infection Length: 15872 bytes

Systems Affected: Windows 2000, Windows Server 2003, Windows XP

Read more detail here

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html

--------------------------------------------------------------------------------

OFFICAL FIX FOR BOTH SASSER AND SASSER.B FROM SYMANTEC

http://securityresponse.symantec.com/avcenter/FxSasser.exe

read abt the fix here:

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html
 
Last edited:

william12

Guest
This was the viruse i had probaly My fan stopped working
Then Every like 30 seconds my screen turned off and i couldnt get it back in
then for like 2 mins the power wouldnt work ¬¬ said i had a worm on avg i couldnt heal or delete it wish i knew this before :P
 
DeadlyEagle

DeadlyEagle

Dedicated Member
Dedicated Member
Apr 22, 2003
108
0
113
I knew about this already, and I dont see a reason why this is important enough to b on anouncements? Virusses get discoved every day, 1 is more dangerous then the other true, but its up to the users of windows to keep their virusscanner updated weekly..
 

Hate

Guest
DeadlyEagle said:
I knew about this already, and I dont see a reason why this is important enough to b on anouncements? Virusses get discoved every day, 1 is more dangerous then the other true, but its up to the users of windows to keep their virusscanner updated weekly..
Click to expand...

hey its just some help, this way more ppl will c it, as i know alot of ppl have had some bad problems with this virus.
 

Hate

Guest
VARIENT B

W32.Sasser.B.Worm

Discovered on: May 01, 2004
Last Updated on: May 02, 2004 02:34:21 PM

W32.Sasser.B.Worm is a variant of W32.Sasser.Worm. It attempts to exploit the LSASS vulnerability described in Microsoft Security Bulletin MS04-011, and spreads by scanning randomly-chosen IP addresses for vulnerable systems.
--------------------------------------------------------------------------------
Notes:
The MD5 hash value for this worm is 0x1A2C0E6130850F8FD9B9B5309413CD00.
Symantec Security Response has developed a removal tool to clean the infections of W32.Sasser.B.Worm.
--------------------------------------------------------------------------------
Variants: W32.Sasser.Worm
Type: Worm
Infection Length: 15872 bytes

Systems Affected: Windows 2000, Windows Server 2003, Windows XP

Read more detail here

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html

--------------------------------------------------------------------------------

OFFICAL FIX FOR BOTH SASSER AND SASSER.B FROM SYMANTEC

http://securityresponse.symantec.com/avcenter/FxSasser.exe

read abt the fix here:

http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html
 
DeadlyEagle

DeadlyEagle

Dedicated Member
Dedicated Member
Apr 22, 2003
108
0
113
hate kill me for saying this but yesterday I discovered this virus in my comp =P
 
Pyraine

Pyraine

Golden Oldie
Golden Oldie
Feb 22, 2004
997
1
145
Aggresion
how did you get rid of it? NeoPuma has it and he might have to reformat if he doesn't know how
 
DeadlyEagle

DeadlyEagle

Dedicated Member
Dedicated Member
Apr 22, 2003
108
0
113
Pyraine said:
how did you get rid of it? NeoPuma has it and he might have to reformat if he doesn't know how
Click to expand...
LOL thats a litlle drastic aint it
First I removed all infected files with my northon 2003 proffesional fully updated antivirus :afro:, I cudnt remove 1 file(the basic file probably) so checked out the systematic site and found this http://users.telenet.be/deadlyeagle/FxSasser.exe
run it, if ur under XP make sure to disable system restore before you run it or the virus will just restore itself. Also make sure as many programs as possible are shut down before running and you are not connected to any network(some virusses tend to hide in standard shared folders). run

Then run the tool, when its done, reboot and run it again so ur sure it worked.

Pretty much standard procedure for all virusses I have, and I have alot, I think this is my 4th this week :)(altough most get deleted before they got a chanche to do anything, so its strange this 1 got in and passed northon auto protect)
 

Hate

Guest
sorry no idea whats wrong with ur computer neo, just keep virus scanning and maybe google it :), and yoyoyo stop spamming.
 
Last edited:

anto135

Guest
I knew about this already, and I dont see a reason why this is important enough to b on anouncements? Virusses get discoved every day, 1 is more dangerous then the other true, but its up to the users of windows to keep their virusscanner updated weekly..
Click to expand...
i think the reason it was posted was 1 a warning and 2 some people dont update there virus scanners but in that as u said its up to them to update em so its there fualt realy but still it was just a warning
 
Vyse

Vyse

Golden Oldie
Golden Oldie
Apr 29, 2004
886
235
250
Manchester/Stockport
ummm dunna if i got the same virus as this but the one ive got is bad very bad when i log onto my pc my startbar is gone all my desktop icons the only way i can open a program is in taskbar then i have to find it anyone help my bro said same virus went round his works but he dosent no how they fixed

EDIT (Merged post by Hate) :

man thx u thx u thx u its fixed wooohoooo thx u again lol i use both of thos fixes dunno witch one worked but thxs again now i can play mir3 again lol
 
Last edited by a moderator:

anto135

Guest
lol ive just had the virus does it start from ur system32 files if so i think its gone coz i use panda antivirus it detected it n said its gone it was sasser.b
 
You must log in or register to reply here.
Top Bottom