[virusinfo] Norton AntiVirus Technical News Bulletin: Level 4 Virus Alert!
- From: "Mike" <mikebike@xxxxxxxxx>
- To: virusinfo@xxxxxxxxxxxxx
- Date: Tue, 04 May 2004 09:50:42 -0700
From; Symantec Bulletins:
Level 4 Virus Alert! W32.Sasser.B Worm
W32.Sasser.B.Worm is a variant of W32.Sasser.Worm. It attempts to exploit
the LSASS vulnerability described in following Microsoft Security Bulletin
MS04-011:
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx
The worm spreads by scanning randomly selected IP addresses of vulnerable
systems.
The following write-up will be updated when additional information about
the worm is available.
Check the write-up frequently for updated information.
http://www.symantec.com/techsupp/vURL.cgi/sctyrsp4
Also Known As: WORM_SASSER.B [Trend], W32/Sasser.worm.b [McAfee]
Type: Worm
Infection Length: 15872 bytes
Systems Affected: Windows 2000, Windows Server 2003, Windows XP
Systems Not Affected: Linux, Macintosh, UNIX, Windows 3.x
_____________________________
2. Virus Definitions
Definitions dated May 1, 2004 will detect the W32.Sasser.B Worm.
Run LiveUpdate or download the Intelligent Updater virus definitions at:
http://securityresponse.symantec.com/avcenter/defs.download.html
_____________________________
3. Removal Tool
Symantec Security Response has developed a removal tool to clean the
infections of W32.Sasser.B Worm. You can download the removal tool from the
Symantec Web site at:
http://www.symantec.com/techsupp/vURL.cgi/sctyrsp5
_____________________________
4. Feedback
Do you have feedback that can help us provide better products or services?
If so, then we want to hear from you. Visit the Symantec suggestion box at
the following Internet address, and let us know how we can improve:
http://www.symantec.com/feedback/
_____________________________
To view this and prior Norton AntiVirus Technical News Bulletins in HTML
format, visit the following Internet address:
http://www.symantec.com/techsupp/bulletin/archive/nav/nav_archive.html
*********** MIKE"S REPLY SEPARATOR ***********
Mike ~ It is a good day if I learned something new.
Editor MikesWhatsNews see a sample on my web page
http://www3.telus.net/mikebike
<mikeswhatsnews-request@xxxxxxxxxxxxx?Subject=subscribe>
http://www3.telus.net/mikebike/worm_removal.htm
See my Anti-Virus pages http://virusinfo.hackfix.org/index
<virusinfo-request@xxxxxxxxxxxxx?Subject=subscribe>
A Technical Support Alliance and OWTA Charter Member
Other related posts:
