sasser is still out there. why?

[Andy Nagai]

I have bought a new laptop in 6/04. it didnt have the last windows
patches. As soon as i got online, i got the dreaded lsass error and it
shut down. I dont think i even went to a site. Is the sasser just
wandering around the internet infecting whatever machine doesnt have
the patch? It appears that many servers have the virus still.

I just got DSL for my home on 7/04 and as soon as i got connected i
got the damned lsass error message on my desktop machine. before i had
DSL I had slow Earthlink connection and had eradicated a variant of
the sasser long ago. But when i connected the DSL line i immediately
got another sasser variant. I got the one which cant be cleaned by
microsoft tool. so i downloaded the latest patch again. Why cant the
sasser be eradicated?

 

[Cari \(MS-MVP\)]

It's still around because some folks will not purchase (or update) their
antivirus software and will not use a firewall.

Some with all viruses, there are still incidences of LoveLetter appearing!
If every single PC in the world ran antivirus and firewall software and
hardware, it would be a much safer PC world.

Not many folks leave their house or vehicle unlocked while they're away.
But it's amazing what they will do with their PCs.

 

[Jupiter Jones [MVP]]

Yes it is still out there.
You do not need to do anything other than have the computer physically
connected to the network without a firewall.
Sasser found for computer.
In the future, do not physically connect to the network without a
firewall.

 

[Jerry Baker]

microsoft tool. so i downloaded the latest patch again. Why cant the
sasser be eradicated?

Because users keep connecting their unprotected computers to the
Internet - even if it's for brief periods of time. During that time you
caught it and helped spread it.

 

[Lanwench [MVP - Exchange]]

In addition to the other replies: It's kind of like refusing to vaccinate
your infant. You are expecting that everyone else has vaccinated theirs.

Never connect to the Internet without a firewall - not even for a second,
not even with a dialup account. It takes only a second.

 

[Lanwench [MVP - Exchange]]

To all in response to previous replys:


This seems odd, but with a dial-up connection, immediately unplugging
the phone cord and power outlet cord seems to delete Win32.Sasser.A
and many of its variants. It may seem weird, but that's what
happened to me...

Well, you can also cure this problem by unplugging your computer from the
power supply and never turning it on again.

Disconnecting does nothing to get rid of the problem, except postponing it.