Sasser worm 'spreading rapidly'

[Malicious Intent]

Sasser worm 'spreading rapidly'

A new internet virus spreading rapidly around the world may already have infected millions of computers.

The Sasser worm spreads automatically, and can attack any computer connected to an internet service provider.

It typically shuts down the computer then automatically re-boots it and repeats this process several times, but is not thought to cause lasting damage.

The worm exploits a security flaw in some versions of Windows, but this can be prevented with a Microsoft patch.

Unlike a computer virus, the Sasser worm does not infect computers through emails or attachments, but can target any PC linked to the internet.

Alfred Huger, senior director of engineering at Symantec, based in California, said the worm "breaks into your computer and then attempts to break into others".

"It chooses its victims randomly," he added.

Mr Huger said someone had started the virus deliberately.

"Of that much we're sure."

Mikko Hyppoenen, an anti-virus expert at Finnish internet security company F-Secure, said: "It was probably some hobbyist, a teenager who has the skills and wants to show off.

"We don't know how big this is going to be - but we expect things to get much worse when people bring their laptops in to the office after the weekend," he added.

Graham Cluley, senior technology consultant for Oxfordshire-base software security company Sophos, said home users were especially vulnerable.

"They are often not running the latest anti-virus protection, haven't downloaded the latest security patches from Microsoft, and may not be running a personal firewall," he added.

-------------------------------------

OSs affected:

Affects Windows 2000

Windows Server 2003

Windows XP

If you have the latest Microsoft patches, you should be fine.

Removal tool can be found here:

http://securityresponse.symantec.com/avcen...moval.tool.html

[method77]

I always like it when new worms come into our daily internet lives

[Malicious Intent]

As with all new members, it has a welcome thrread.

[Ken]

Early reports suggested it was slow at spreading, and poorly coded.

[MxRob]

I always like it when new worms come into our daily internet lives

It keeps us on our toes :D

[CTC Command]

This Lsass virus is mildly annoying, but fortunately not catastrophic. I got hit this weekend--if you hit cancel it'll shut you down or debug it will shut you down. If you do nothing, it does nothing. I downloaded the patch/update from microshaft, but didn't want to restart until some other stuff I was in the middle of finished up. Sasser just sat there doing nothing till I ran the patch & when I finally restarted it was gone. I run Norton very regularly, and this managed to slip through nonetheless. My friend the software architect said just being connected to the internet infected me; it had nothng to do with p2p or email attachments. The company he's consulting for got nailed bigtime by this over the weekend.

There's just the most friendly people on the internet, I must say. :taskmaster: