[virusinfo] Norton AntiVirus Technical News Bulletin: Level 4 Virus Alert!
- From: "Mike" <mikebike@xxxxxxxxx>
- To: virusinfo@xxxxxxxxxxxxx
- Date: Tue, 04 May 2004 17:49:16 -0700
From; Symantec Bulletins:
3 May 2004
To view this and prior Norton AntiVirus Technical News Bulletins in HTML
format, visit the following Internet address:
http://www.symantec.com/techsupp/bulletin/archive/nav/nav_archive.html
_____________________________
1. Level 4 Virus Alert! W32.Sasser.B Worm
W32.Sasser.B.Worm is a variant of W32.Sasser.Worm. It attempts to exploit
the LSASS vulnerability described in following Microsoft Security Bulletin
MS04-011:
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx
The worm spreads by scanning randomly selected IP addresses of vulnerable
systems.
The following write-up will be updated when additional information about
the worm is available. Check the write-up frequently for updated
information.
http://www.symantec.com/techsupp/vURL.cgi/sctyrsp4
Also Known As: WORM_SASSER.B [Trend], W32/Sasser.worm.b [McAfee]
Type: Worm
Infection Length: 15872 bytes
Systems Affected: Windows 2000, Windows Server 2003, Windows XP
Systems Not Affected: Linux, Macintosh, UNIX, Windows 3.x
_____________________________
2. Virus Definitions
Definitions dated May 1, 2004 will detect the W32.Sasser.B Worm.
Run LiveUpdate or download the Intelligent Updater virus definitions at:
http://securityresponse.symantec.com/avcenter/defs.download.html
_____________________________
3. Removal Tool
Symantec Security Response has developed a removal tool to clean the
infections of W32.Sasser.B Worm. You can download the removal tool from the
Symantec Web site at:
http://www.symantec.com/techsupp/vURL.cgi/sctyrsp5
_____________________________
4. Feedback
Do you have feedback that can help us provide better products or services?
If so, then we want to hear from you. Visit the Symantec suggestion box at
the following Internet address, and let us know how we can improve:
http://www.symantec.com/feedback/
_____________________________
5. Subscribing and unsubscribing
You are receiving this email because you subscribed to the Norton AntiVirus
Technical News Bulletin from the Symantec Web site.
If you want to subscribe to other Symantec newsletters, or you want to
unsubscribe, then follow the instructions at the following Internet
address:
http://www.symantec.com/techsupp/bulletin/consumer.html
If you are unable to successfully unsubscribe, then follow these steps:
1. Create a new email message addressed to:
LISTSERV@xxxxxxxxxxxxxxxxxxxx
2. In the Subject line, type the following:
UNSUBSCRIBE
3. In the body of the message, type the following:
SIGNOFF NAV-TECHINFO-L
4. Send the message.
_____________________________
6. Disclaimer
THIS DOCUMENT IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY.
This message contains Symantec Corporation's current view of the topics
discussed as of the date of this document. The information contained in
this message is provided "as is" without warranty of any kind, either
expressed or implied, including but not limited to the implied warranties
of merchantability, fitness for a particular purpose, and freedom from
infringement. The user assumes the entire risk as to the accuracy and the
use of this document. This document may not be distributed for profit.
Symantec and the Symantec logo are U.S. registered trademarks of Symantec
Corporation. Other brands and products are trademarks of their respective
holder(s).
(c) Copyright 2004 Symantec Corporation. All rights reserved. Materials may
not be published in other documents without the express, written permission
of Symantec Corporation.
______________________________________________________
Mike ~ It is a good day if I learned something new.
Editor MikesWhatsNews see ~ http://www.mwn.ca
<mikeswhatsnews-request@xxxxxxxxxxxxx?Subject=subscribe>
See my Anti-Virus pages
<http://www3.telus.net/mikebike/mikes_virus_page.htm>
<virusinfo-request@xxxxxxxxxxxxx?Subject=subscribe>
A Technical Support Alliance & OWTA Charter Member
Other related posts:
