PDA

View Full Version : Sasser Worm


PokemonElite2000
05-06-2004, 12:59 AM
For XP and 2000 users... Chances are, if you haven't installed a patch from Microsoft's Windows Update site, you have this worm. This is unlike any other viruses, you don't have to download anything from the internet to your computer, or open an email attachment, once you go online, you can get the Sasser worm, within minutes time. To protect yourself, you need to install a patch from Windows Update, and of course, if you're infected, you need to remove it.

The the instructions on how to remove the worm and protect yourself from getting it again is at the Microsoft's official page about the Sasser worm: http://www.microsoft.com/security/incident/sasser.asp

Luckily, I already installed the patch a week before the worm was released, so I was protected. But many people haven't been keeping up-to-date with Windows Update, so a lot of people are infected. The main things you need to do is install the update, and use the tool to detect and remove the Sasser worm. After that, just make sure you keep up-to-date with the Windows Update.

Tamer Marco
05-06-2004, 01:03 AM
*Gahhh* Please don't tell me this infects Hewert Packard users...Since you didn't say anything about HP computers I assume I am safe. :neutral:

PokemonElite2000
05-06-2004, 01:30 AM
*Gahhh* Please don't tell me this infects Hewert Packard users...Since you didn't say anything about HP computers I assume I am safe. :neutral:
It doesn't matter what computer maker made your computer, it's just that if you use Windows XP or Windows 2000, and you don't have the patch installed, you probably have it, and you need to fix your computer. Luckily, it's not to hard if you follow that webpage, install the patch and use the tool to detect and remove the worm.

Lord Celebi
05-06-2004, 02:03 AM
Serebii got this last weekend (I just read on SPP).

I'm so glad my computer with 2000 Beta 4 is not hooked up to the net. What a relief.

PokemonElite2000
05-06-2004, 02:18 AM
Serebii got this last weekend (I just read on SPP).

I'm so glad my computer with 2000 Beta 4 is not hooked up to the net. What a relief.
A lot of people got it over the weekend, that's when the worm was released on the internet. And just by logging into the internet, you can get the worm. So not that hard to get at all, but if you're protected already (or get yourself protected), then you're fine.

This one is a major one and unusual one, since the user doesn't need to do anything wrong to get the worm. Usually, you have to download an attachment from an email and get viruses that way (that's why you don't download attachments from strangers), or just by downloading a file a stranger tells you to install and you don't know or not sure what it is. The only thing the user done wrong is not updating, which is pretty much Microsoft's fault for making it so easy for people to exploit stuff like that.

KenshinU
05-06-2004, 07:39 AM
Yes, Sasser Worm spreads itself through a security hole that was accidentally left in Windows 2000 and Windows XP. The latest free patch that was meant to repair the glitch was taken hold of by some computer criminals, which allowed them to establish where exactly the security hole was. Basically, as PE2K has stated, it's partially Microsoft's fault. They could have done a better job searching for small flaws like that one, and there is no doubt that there are plenty more of those.

You might be wondering what the Sasser does after breaking through. It is a simple virus that causes your computer to continuously shut down and restart itself after the OS begins operating. I have had something similar to that. I turn my computer on, Windows start, blue screen appears for a second, machine shuts down. :neutral: I really had no other choice but to completely reinstall Windows, since I didn't know how to fix the little bugger. The Safe Mode was still available, but it obviously wasn't much of a help. :rolleyes: Sasser pretty much does the same thing, only you get this small System Shutdown box that says "Time before shutdown," showing the time going backwards.

What I don't understand is how the infected users are supposed to download the update from that link if their computers shut down before they have a chance to go online... :rolleyes:

Now imagine what this is going to be like in a few years. The attackers have a brand new way to get into others computers. About 20 years ago, the only possible way to infect someone's computer was through the floppy disks. After the Internet was invented the virus writers got a new and more effective way to spread the computer diseases. E-Mails, fake downloadable software, etc. Now it's becoming even more frightening...

Sasser is not going to be the last virus to get through a security hole. It might have been their first warning. Next they just might make a virus similar to Sasser that can... I don't know, delete the main Windows folder? Set a pornographic photo as your desktop that cannot be changed? Who knows? :confused:

Kenny_C.002
05-07-2004, 01:51 AM
Thank goodness for Window 98 second edition! :P

Aside from that, I heard that Edmonton city was shut down because of this. My school also got slammed, except for the 30 old machines that run Windows 98. So yeah, things aren't good for people...

Sutiivun
05-07-2004, 03:41 AM
Good thing I just got an HP. But my computer is still infected with spyware. It's taken over and my homepage has completely change. And a couple unmentionable things have appeared in my email. :mad: My dad is going to take it away to the shop and try to get all of it off. :sad:

Kenny_C.002
05-07-2004, 03:51 AM
You know you can just restore it yourself, right? I mean, if you're gonna wipe everything out, then do it yourself. If not, you can download the adaware and spybot (remember to UPDATE) to solve most of the problems...for spy and adware.

If there's a virus...restore.

Sutiivun
05-07-2004, 04:13 AM
Yes, I'll rpobably try to restore it. I'm just scared of messing something up. :tongue3: Besides, my dad already decided he would, so yeah.

boltAge
05-07-2004, 12:09 PM
I don't think I have updated, yet I don't seem to have the worm... When I go to Windows Update, they don't show the update as a critical one. I don't even see the updated. I'm confused, since when did I updated, or did my dad update it already... Yeah, I saw this article on the bulletin board in my class, and people was like, "Hey, you still dare to use Windows XP? They say there's a worm running about". I wasn't even gonna bother about them, but not after I knew the consequences.

*Goes to run Norton Antivirus Scan, Spybot: Search & Destroy, and Ad-aware*

PokemonElite2000
05-07-2004, 07:57 PM
Good thing I just got an HP. But my computer is still infected with spyware. It's taken over and my homepage has completely change. And a couple unmentionable things have appeared in my email. :mad: My dad is going to take it away to the shop and try to get all of it off. :sad:
Just follow my guide: http://www.pokemonelite2000.com/antivirusspyware.html . It's really easy to get that junk off your computer. Just a matter of downloading the right programs and using them.

I don't think I have updated, yet I don't seem to have the worm... When I go to Windows Update, they don't show the update as a critical one. I don't even see the updated. I'm confused, since when did I updated, or did my dad update it already... Yeah, I saw this article on the bulletin board in my class, and people was like, "Hey, you still dare to use Windows XP? They say there's a worm running about". I wasn't even gonna bother about them, but not after I knew the consequences.

*Goes to run Norton Antivirus Scan, Spybot: Search & Destroy, and Ad-aware*
If you don't see it, most likely you already have it updated already. Here's how to check: go to Add/Remove Programs, look for "Windows XP Hotfix KB835732." That's the patch that prevents the Sasser worm.

Agent Orange
05-07-2004, 08:06 PM
Thank God for windows 98....

KenshinU
05-10-2004, 05:55 AM
Lucky you...

A lot of people are using XP already...


Windows XP: -- 152,634
Windows 98: -- 4,742
Windows 2000: -- 3,051
Windows ME: -- 3,762
Windows 95: -- 7
Windows NT: -- 14
Macintosh PowerPC: -- 281
Robots: -- 12 (Huh..?)


^--- stats from my forum... =p

pokemon fan
05-11-2004, 02:03 AM
My grandfarther had something close to this virus everytime he went on the internet his computer shut down so to fix it I just downloaded the patch to my computer then burt a CD for him so he does not have to go online to download the patch.

ELMO
05-13-2004, 12:51 PM
Here's an idea. Buy a virus scan. It's called "Norton Antivirus", and eliminates the sasser virus, mydoom virus, and pretty much anything else that can invade your computer. the patch probably won't protect against this worm, so do the smart thing. Pay the extra buck and protect yourself. BUY NORTON. Sheesh. :rolleyes:

Kenny_C.002
05-16-2004, 04:19 PM
Not really. If you consider the cost for updates every year, this substantially adds up to a lot of output in money. I know that many users don't have this kind of money to spare, having to pay basically 20 bucks a year just to keep Norton updated (plus then you have to fork out a lot just from getting the computer's programs too).

Also, Norton might not be able to help you out if you have the worm and it activates before you run a virus scan (or if you don't update Norton).

PokemonElite2000
05-16-2004, 10:12 PM
Here's an idea. Buy a virus scan. It's called "Norton Antivirus", and eliminates the sasser virus, mydoom virus, and pretty much anything else that can invade your computer. the patch probably won't protect against this worm, so do the smart thing. Pay the extra buck and protect yourself. BUY NORTON. Sheesh. :rolleyes:
You're wrong about the patch.

If you don't install the patch? Guess what? Remove it, and it will be back just by going on to the internet. You have to install the patch, so you don't have a "hole" in your computer for the Sasser worm to get into your computer. All the antivirus companies, including Norton (Symantec), has advised people to install the patch.

Virus scaners helps, not just for the Sasser worm, but there are free options as well, and that doesn't mean it can't do the job just as well. Avast antivirus is free, and able to detect and remove Sasser. You can get it here: http://download.com.com/3000-2239-10019223.html

Jessu
06-05-2004, 07:59 PM
I read about this in the newspaper. There was a worm related to it called 'Blaster' and it was worse. But I already had protection with what's called Symantec Antivirus. My dad installed it because he found out that I had 2 viruses. And it really helps out a lot!

Jhem
08-19-2004, 07:28 AM
The one thing that bugs me about this is this... Why would people exploit such a thing? what's wrong with people just trying to make others' live a living hell? Why make viruses? WHy waste your time?

Matthew
08-19-2004, 07:33 AM
The one thing that bugs me about this is this... Why would people exploit such a thing? what's wrong with people just trying to make others' live a living hell? Why make viruses? WHy waste your time?

Why did you revive this thread XD... anyways, it don't much matter... it is Other Comps... :susp:

because they have plenty of time to begin with... they are usually created by fat, bald 40 year old losers who who still live with their parents in their basement... XD.

Sudo
02-06-2005, 09:47 PM
Just downloaded it! -sigh of relief

An interesting theory is that norton antivirus is funding the spyware and virus producers to make them so that the unsurspecting internet user will have to go out and buy their products to fix their messed up computers :susp:

What do you think of that?

boltAge
02-23-2005, 09:53 AM
I believe this needs an unsticky, it's almost a year old.

Good day.

HKim
09-02-2005, 07:57 PM
Yes, this thread is old and I'm sure Microsoft has patches all their new computers.


Thread- Unstickied and Locked