NOVA OPASNOST: W32/Sasser.worm - LSA Shell problem + restart Windows

[petri]

up-date:
Run: shutdown -a
ne pomaze. Masina se i dalje gasi... i nema se vremena da se odradi dezinfekcija i patch-ovanje.
Sta da radim?

Probaj da vratis sat neki dan/godinu/bilo_koliko unazad kad pocne odbrojavanje

 

[minketa]

Patch je instaliran... i agonija je prosla.

 

[~ChiCk~]

hmmm...
mnogo ljudi se inficiralo sa sec.
neznam.... ja sam ga rucno izbacila, i od tada sve radi kako treba
system restore ofkors, izbacila avserve, i sve one njegove ...._up.exe ostatke
i na ga kraju izbacila iz registry-ja

 

[Preeky]

w2k sp4

josh nisma osetio tog sasera
jel postoji uopshte to?

 

[Hal 9000]

w2k sp4

josh nisma osetio tog sasera
jel postoji uopshte to?

E stvarno ja na win 2000 sp4 nishta "ne osetih" ,) Stvarno mi nije jasno, jel to smo xp i win 98 toliko shupalj :d Pozdrav

 

[vertig0]

Systems Affected: Windows 2000, Windows Server 2003, Windows XP

Systems Not Affected: Linux, Macintosh, Novell Netware, OS/2, UNIX, Windows 95, Windows 98, Windows Me, Windows NT

The W32.Sasser family of worms can run on (but not infect) Windows 95/98/Me computers. Although these operating systems cannot be infected, they can still be used to infect vulnerable systems that they are able to connect to. In this case, the worm will waste a lot of resources so that programs cannot run properly, including our removal tool. (On Windows 95/98/Me computers, the tool should be run in Safe mode.)


tako da mozda i osetite, nemojte dvaput da kazete... ,)

 

[Hal 9000]

Systems Affected: Windows 2000, Windows Server 2003, Windows XP

Systems Not Affected: Linux, Macintosh, Novell Netware, OS/2, UNIX, Windows 95, Windows 98, Windows Me, Windows NT

The W32.Sasser family of worms can run on (but not infect) Windows 95/98/Me computers. Although these operating systems cannot be infected, they can still be used to infect vulnerable systems that they are able to connect to. In this case, the worm will waste a lot of resources so that programs cannot run properly, including our removal tool. (On Windows 95/98/Me computers, the tool should be run in Safe mode.)


tako da mozda i osetite, nemojte dvaput da kazete... ,)

Videcemo, mozda nam kasni :d :d

 

[frogman]

Ako ste zarazeni i krene da vam gasi masinu ukucajte u run prozor "shutdown /a", zatim izasla je i nova verzija w32.sasser.e.worm koji kreira "lsasss.exe" proces koji koristi 100% cpu-a. Za njih je preki leki iskljucivanje system restore-a, zatim ciscenje sa norton-ovom fxsasser alatkom v1.04. zato sto podrzava ovu novu mutaciju i na kraju svega zakrpa sa microsoftovog sajta. I nema sanse da se pojavi vise. Provereno 100%.