Net Manager
Network Managing, Engineering and Administration with an eye toward security.

Best practices meets the real world!


Monday, May 03, 2004  
Sasser Worm

Sasser worm is now in the wild, with an A, B and C variant already documented and reports of a D variant waiting in the wings. Sans's Incident Storm Center is all over this one. They've updated their infocon to Yellow, Symantec is at a 3, ISS is at either a 2 or 3, and many virus vendors are following this one as well. The folks over at F-Secure have a nice Weblog in which they document some of Sasser's victims.

Make sure you patch the hole *first*, then clean the infection with either a tool, or a manual cleaning. That way you won't get re-infected.

posted by David | 5/03/2004 12:11:00 PM

0 Comments:

Post a Comment

<< Home

links
News Links
Blog Links
archives
contact

PicoSearch

Reading blogs at work? Click to escape to a suitable site!
Get Firefox

Site Meter

Powered by Blogger