Re: w32.SASSER

From: Trafton (traftonofjj2SPAM_at_yahoo.com)
Date: 05/18/04 

Date: Tue, 18 May 2004 15:41:44 -0800

Hi,

You are infected with W32/Sasser.worm or its variant, W32/Sasser.worm.b.

The first step to take is to update your machine with the latest patches.
You can do this at the following site:

http://windowsupdate.microsoft.com/

Then, you need to remove the worm. This can be accomplished using McAfee's
Stinger program. Stinger can be downloaded here:

http://vil.nai.com/vil/stinger/

Next, you should get a good antivirus program. You can find a free program
called AVG here:

http://www.grisoft.com/

Last but not least, turn on the firewall that comes with your Windows
installation. If you do not have Windows XP, you can get ZoneAlarm, a free
firewall, here:

http://www.zonealarm.com/

This, along with frequent Windows Updates, should prevent future infection.

Hope this helps. Feel free to post back if you need any more assistance.

Sincerely,
Benjamin Johnstone-Anderson
Microsoft MVP - Windows Security
Remove "SPAM" from email address to reply!
Security Manifest: www.msmvps.com/trafton/

<anonymous@discussions.microsoft.com> wrote in message
news:edc201c43d1f$6cb5c9b0$a501280a@phx.gbl...
>
>>-----Original Message-----
>>i WOULD LIKE TO HAVE INFORMATION ABOUT THE
>>w32.SASSER VIRUS I HAVE UN FILE THAT I CANT DELET
>>.Yes
>>

Relevant Pages

  • Re: group policy disables firewall - virus result
    ... > | How do you TURN ON the Acer Notebook OEM Windows XP SP2 Home Edition FIREWALL ... > | What happens is when I try and chance the firewall or Windows Security ... > | settings it says it is being controlled by Group Policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to enable RPC service in Windows XP
    ... You need to install and use ... Update regularly to keep your version of Windows current... ... You connected to the internet without a firewall on your computer. ... infection not only by SASSER, but also by the thousands of other worms, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Warning. New Windows vulnerabilty.
    ... security center warning by putting a popup in systray that says your ... see how this new vulnerability will affect users, ... It is carried on Windows Metafile images and automatically ... >> currently recommend to reduce the hazard of infection may not work. ...
    (rec.audio.pro)
  • Re: Warning. New Windows vulnerabilty.
    ... >security center warning by putting a popup in systray that says your ... >see how this new vulnerability will affect users, ... It is carried on Windows Metafile images and automatically ... >>> currently recommend to reduce the hazard of infection may not work. ...
    (rec.audio.pro)
  • MyDoom/Zindos removal tool offered erroneously via AutomaticUpdates?
    ... firewall in my dsl modem, and also uses the Windows XP firewall, - and ... Anyway, (surprise surprise), running the tool didn't find any infection. ...
    (NT-Bugtraq)