Home » 

UK ISP News Archives

 » 
Sponsored Links

MAJOR Virus Warning - Sasser

Posted: 03rd May, 2004 By: MarkJ
Remember the so called MS Blaster worm? A virus notorious for its ability to infiltrate computer systems just by seeing you connected to the Internet, well a similar infection (Sasser) has started circulating.

In fact my own system became infected on Friday, yet Norton's database didn't pick it up until Sunday, although thankfully I was aware of it on Friday and managed to physically put a stop to things myself (made itself too obvious in the process list).

The thing is, not only are broadband users most and risk, but even with an updated virus database and all the latest critical MS patches, it still managed to infect. You don't have to do anything, it'll just sneak onto your system while you’re connected and that's why it's a serious threat:

This worm spreads by exploiting a recent Microsoft vulnerability, spreading from machine to machine with no user intervention required.

This worm scans random IP addresses for exploitable systems. When one is found, the worm exploits the vulnerable system, by overflowing a buffer in LSASS.EXE. It creates a remote shell on TCP port 9996. Next it creates an FTP script named cmd.ftp on the remote host and executes it. This FTP script instructs the target victim to download and execute the worm (with the filename #_up.exe as aforementioned) from the infected host. The infected host accepts this FTP traffic on TCP port 5554.

The worm spawns multiple threads, some of which scan the local class A subnet, others the class B subnet, and others completely random subnets. The destination port is TCP 445.


Typically I'd just re-installed my OS, so the firewall wasn't online yet, hence the added risk. A removal tool can be found HERE. You'll also need to update your AV software and pop along to Microsoft's website for the correct patch HERE.
Search ISP News
Search ISP Listings
Search ISP Reviews
 Latest UK ISP News
 Cheapest Superfast Broadband ISPs
  • Hyperoptic £17.99
    Speed 33Mbps, Unlimited
    Gift: None
  • UtilityWarehouse £19.99
    Speed 35Mbps, Unlimited (FUP)
    Gift: None
  • NOW £23.00
    Speed 63Mbps, Unlimited
    Gift: None
  • Vodafone £24.00
    Speed 73 - 82Mbps, Unlimited
    Gift: None
  • Shell Energy £24.99
    Speed 38Mbps, Unlimited
    Gift: None
Large Availability | Compare More ISPs
 Cheapest Ultrafast Broadband ISPs
  • Gigaclear £17.00
    Speed: 200Mbps, Unlimited
    Gift: None
  • Zzoomm £19.95
    Speed: 150Mbps, Unlimited
    Gift: None
  • YouFibre £19.99
    Speed: 150Mbps, Unlimited
    Gift: None
  • Community Fibre £20.00
    Speed: 150Mbps, Unlimited
    Gift: None
  • BeFibre £21.00
    Speed: 150Mbps, Unlimited
    Gift: £25 Love2Shop Card
Large Availability | Compare More ISPs
Cheapest Superfast ISPs
  • Hyperoptic £17.99
    Speed 33Mbps, Unlimited
    Gift: None
  • UtilityWarehouse £19.99
    Speed 35Mbps, Unlimited (FUP)
    Gift: None
  • NOW £23.00
    Speed 63Mbps, Unlimited
    Gift: None
  • Vodafone £24.00
    Speed 73 - 82Mbps, Unlimited
    Gift: None
  • Shell Energy £24.99
    Speed 38Mbps, Unlimited
    Gift: None
Large Availability | View All
Cheapest Ultrafast ISPs
  • Gigaclear £17.00
    Speed: 200Mbps, Unlimited
    Gift: None
  • Zzoomm £19.95
    Speed: 150Mbps, Unlimited
    Gift: None
  • YouFibre £19.99
    Speed: 150Mbps, Unlimited
    Gift: None
  • Community Fibre £20.00
    Speed: 150Mbps, Unlimited
    Gift: None
  • BeFibre £21.00
    Speed: 150Mbps, Unlimited
    Gift: £25 Love2Shop Card
Large Availability | View All
Helpful ISP Guides and Tips
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
»
Sponsored Links
The Top 20 Category Tags
  1. FTTP (5406)
  2. BT (3490)
  3. Politics (2497)
  4. Openreach (2278)
  5. Business (2226)
  6. Building Digital UK (2217)
  7. FTTC (2039)
  8. Mobile Broadband (1942)
  9. Statistics (1765)
  10. 4G (1640)
  11. Virgin Media (1594)
  12. Ofcom Regulation (1439)
  13. Fibre Optic (1380)
  14. FTTH (1379)
  15. Wireless Internet (1379)
  16. 5G (1216)
  17. Vodafone (1128)
  18. EE (1112)
  19. TalkTalk (927)
  20. O2 (918)
Sponsored

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms  ,  Privacy and Cookie Policy  ,  Links  ,  Website Rules