New, Blaster-style Windows worm sweeps the Net

Houston Chronicle ^ | 5/1/04 | DWIGHT SILVERMAN

[Valin]

Computers using Microsoft's Windows XP or 2000 operating systems are the target of a new Internet worm that spreads from machine to machine without user intervention.

The worm, dubbed Sasser, takes advantage of a flaw in Windows that was patched by a fix issued in mid-April. However, because not all users take advantage of an auto-update feature included in Windows XP and 2000, there are still many systems connected to the Internet that are vulnerable.

Sasser attacks a component of Windows called LSASS.EXE, and installs a file called AVSERVE.EXE, which then begins scanning the Internet and local networks for more machines to infect. Unlike the majority of viruses and worms that attack Windows-based systems, Sasser does not require e-mail to spread.

According to McAfee.com, a PC security site operated by Network Associates, the worm may also crash the LSASS.EXE module in Windows.

Sasser is similar to another worm that wreaked havoc among Windows users in 2003. MS-Blast or Blaster worked the same way, taking advantage of unpatched systems and exploiting a flaw for which Microsoft had already offerered a patch.

The patch that fixed the flaw Sasser exploits was released April 13.

The use of a hardware or software firewall -- which prevents unauthorized access to a computer on a network -- may also provide some protection to unpatched systems. Most of the major developers of antivirus software have released updates to their products to detect and remove Sasser.

Microsoft has come under increasing fire from computer security experts because its software is ubiquitous and riddled with flaws that allow such attacks.

[Valin]

Let's be careful out there.

[DainBramage]

Microsoft has come under increasing fire from computer security experts because its software is ubiquitous and riddled with flaws that allow such attacks.

Duh

[martin_fierro]

FREE PC PROTECTION: (Not an exhaustive list. Your results may vary. Void where prohibited. For entertainment purposes only. No wagering, please. Whattayawantfernuthin'.) (Thanks, but "Buy a Mac" doesn't qualify as "FREE PC protection")

Alternative browsers: Mozilla Opera AVG Anti-Virus Free Edition: Free anti-viral protection Popup ad killers: Bayden Systems Popup Popper: Blocks popup ads well in MSIE Shoot the Messenger: Close that friggin' Messenger in Windows XP Spyware removers: Spybot S&D AdAware MailWasher: Good for pre-screening & bouncing SPAM Windows Update: At least install the critical ones ZoneAlarm: Excellent Firewall Test your firewall from without with ShieldsUP! Test your firewall from within with LeakTest LAST BUT NOT LEAST: Explore Linux as an alternative OS, without installing it on your hard drive, via a free bootable CD-ROM! Download Knoppix (or one of these other Linux distributions), burn the ISO file onto a CD-ROM, and reboot with the CD-ROM in its drive. If you later want to install Knoppix on your hard drive, here are some tips.

[widgysoft]

everybody, get yer self here now!!!! http://windowsupdate.microsoft.com

[Tax Government]

And get here, to the Microsoft Baseline Security Analyzer download page:

http://www.microsoft.com/downloads/details.aspx?FamilyID=8b7a580d-0c91-45b7-91ba-fc47f7c3d6ad&displaylang=en

[barker]

Bump.

[Destructor]

No worries. I have a Mac! LMAO!!

[SeaDragon]

Heads up!

[Prime Choice]

No worries. I have a Mac! LMAO!!

No worries here, either. I'm running Linux! Woohoo!

(Starting the timer on when the Redmond shills start showing up...*snicker*)

[jalisco555]

No worries. I have a Mac! LMAO!!

I know that Macs cost more to buy then PC's but I can't tell you how many hours I've wasted maintaining the PC's in my house. I've replaced my laptop with a Mac and over time I'll do the same for our other computers (we have five total) as well. When you factor in the value of my time Macs are far cheaper.

[IamHD]

I've installed AVG several times on my laptop, and I have had to uninstall it every time, because it's conflicting with either my zonealarm, or my mcaffee anti-virus.

It freezes my computer, and sometimes, it takes an hour for me to reboot. Have you any idea why this happens?

[steve86]

No worries here, either. I'm running Linux!

So am I, but I'm starting to get worried in a preliminary way. Just in the last two weeks, a well-known web site has started trying to download an "X" version of adware. So far my system has intercepted these, but it is only a matter of time..

[Destructor]

The only reason to own a PC is for gaming. Other than that Macs are superior, and that's only due to the fact that there are more games available for the PC.

Macs represent 3% of the market, and the Mac operating system makes it a lot harder to write code for the Mac than the PC. Most Hackers don't bother. Basically, Macs are one of the best kept secrets in computing-- literally hidden in plain sight! I laugh at the general wave of panic that accompanies each new virus.

[martin_fierro]

Huh! Never experienced that problem.

I've got both ZA & AVG on my dad's PC, and everything seems to be OK.

[upchuck]

Related story^ posted nearly two hours ago. Also see this^.

[AlBondigas]

Pick one: AVG or McAfee - running (2) AV programs simultaneously...not good.
Either will work w/ Zone Alarm

[IamHD]

Thanks. It must be conflicting with my McAffee, then. It's an older version, so maybe I will uninstall that, and reinstall the AVG. The only reason that I've hesitated in doing that, though, is McAffee won't allow me to reinstall it if I remove it. (it came with my laptop)

[IamHD]

Thanks. I'm going to remove the Mc, and reinstall the AVG. :)

[JimRed]

Hackers need to be dealt with appropriately. Virus creators should be tied to a post in the public square (or whatever passes for one these days). Everyone who has lost time or money to their virus should be offered one shot at them with a choice of broom handle, rubber hose or bullwhip.

If they survive 24 hours, they go to prison for 25 years.