patch

[richard]

Does anyone have the patch needed for that worm or virus
that hit everyone with windows xp and 2000 that stops you
from being able to stay online. it affects my c drive
windows\system32\lsass.exe. the worm\virus came out
several months ago i think. can anyone help?

 

[msi]

i dont have the virus so it didnt hit everyone. im smart enough to be using
a router.

 

[David H. Lipman]

http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx

http://www.microsoft.com/security/incident/sasser.asp

Win2K:
http://www.microsoft.com/downloads/...7E-F63A-414C-B3EB-D2342FBB6C00&displaylang=en

WinXP:
http://www.microsoft.com/downloads/...9E-DA3F-43B9-A4F1-AF243B6168F3&displaylang=en

Dave




| Does anyone have the patch needed for that worm or virus
| that hit everyone with windows xp and 2000 that stops you
| from being able to stay online. it affects my c drive
| windows\system32\lsass.exe. the worm\virus came out
| several months ago i think. can anyone help?

 

[Mike Kolitz]

http://www.longhornblogs.com/mikey/archive/2004/05/01/3306.aspx

 

[Bruce Chambers]

Greetings --

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.

What You should Know about the Sasser Worm and its Variants
http://www.microsoft.com/security/incident/sasser.asp

Microsoft Security Bulletin MS04-011
http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

W32.Sasser.Worm
http://www.symantec.com/avcenter/venc/data/w32.sasser.worm.html

A tool is available to remove the Sasser worm variants
http://support.microsoft.com/default.aspx?scid=kb;EN-US;841720

W32.Sasser.Worm Removal Tool
http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

McAfee AVert Stinger Virus Removal Tool
http://vil.nai.com/vil/stinger/


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Alex Nichol]

Does anyone have the patch needed for that worm or virus
that hit everyone with windows xp and 2000 that stops you
from being able to stay online.

That one relating to lsass is recent - the Sasser worm. Download from
link in the fifth 'Affected Software' at
http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx

If you already have the worm, Run the Sasser cleaner tool from the
following URL:
a. For the on-line ActiveX control based version of the cleaner you
can run it directly from the following URL:
http://www.microsoft.com/security/incident/sasser.asp

b. For the stand-alone download version of the cleaner you can
download it from the following URL:

http://www.microsoft.com/downloads/...7E-1B6B-4FC3-90D4-9FA42D14CC17&displaylang=en

but that is not a comprehensive acount


For last year's Blast worm, see Kelly's page
http://www.kellys-korner-xp.com/xp_w.htm#worm