Full
Name: |
Sasser Worm |
| Type: |
Worm |
| Also Known As: |
W32.Sasser.Worm
W32.Sasser.B.Worm
Sasser - W32.Sasser.Worm |
| Danger Level: |
4 |
| Category Description: |
Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.
Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files. |
| Comment: |
W32.Sasser.B.Worm is a variant of W32.Sasser.Worm. It attempts to exploit the LSASS vulnerability described in Microsoft Security Bulletin MS04-011. This worm spreads by scanning randomly selected IP addresses for vulnerable systems.
|
| |
|
| Properties: |
|
| Manual Removal: |
- Make sure to have the latest patches from http://windowsupdate.microsoft.com
- If you get a "shutdown in progress" message, you have 1 minute to go to Start > Run and there type "shutdown -a". This will abort the shutdown process, allowing for more time for removal.
- Get a good antivirus software to remove this. |
