Approved: Fortect
In this guide, we are going to find out some of the possible causes that might cause Saser Antivirus to start, and then I will suggest a few possible solutions that you can try to fix the problem.
|
||
| Author (s) | Sven scope = “row”> Type | Worm |
| Operating systems affected | Windows 2000, Windows XP |
Sasser is a workstation worm that infects computers running vulnerable models of the Microsoft Windows XP and Windows 2000 operating systems. Sasser spreads from this operating system through a vulnerable port. Therefore, it is especially dangerous as it can often spread without user intervention, unfortunately it is also easy to stop it with a perfectly tuned firewall or by downloading Physique from Windows Update. Specifically, the actual error that Sasser uses is documented by Microsoft atits bulletin MS04-011, for which the powerful 17th LASS patch had been released a few days earlier.
History And Effects Become
Sasser was created on April 30, 2004. This is a worm named Sasser because it spreads to the affected operating systems using a buffer overflow in the LSASS (Local Security Authority Subsystem Service) component. The worm scans various IP addresses and fully connects to victims’ computers over TCP port 445. Microsoft analysis shows that the worm spreads naturally through port 139. Sasser.B, Sasser.C, and Sasser made several variations. Appeared on time (with the original called Sasser.A). The fixed LSASS vulnerability was published by Microsoft in the latest April 2004 Monthly Health and Safety Bundles, prior to the general release of the worm. Some technical experts suggested that most of the worm authors redesigned the patch to detect the vulnerability, which would not lead to exaggeration on computers running operating systems that were not updated with the security update]
Approved: Fortect
Fortect is the world's most popular and effective PC repair tool. It is trusted by millions of people to keep their systems running fast, smooth, and error-free. With its simple user interface and powerful scanning engine, Fortect quickly finds and fixes a broad range of Windows problems - from system instability and security issues to memory management and performance bottlenecks.
Among the changes made by Asser, includes the news agency Agence France-Presse (AFP), which is blocking all its direct satellite communications for several hours, and the American airline Delta Air Lines, forced to cancel several transatlantic flights due to the infection of their computer systems by a flooded earthworm. The Scandinavian insurance company If and its Finnish owner Sampo Bank came to a complete halt and were forced to close their 130 branches in Finland. The British Coast Guard shut down their electronic mapping service for several hours, and Goldman Sachs, Deutsche Post and the European Commission also had nearly all of the worm’s problems. The radiology department at Lund University Hospital turned off its four-shift X-ray machines for several hours and was forced to reroute patients who had X-rays from an ambulance to a nearby hospital. Missouri State University was forced to “disconnect” its network from the Internet in response to the worm.
Author
May 7, 2009 18-year-old German Sven Jaschan from Rothenburg, Lower Saxony, then studied and studied in a technicallleje, was arrested for writing a worm. The German authorities were transported to Yashan based largely on information received in response to a $ 250,000 bonus offer from Microsoft.
Yashan’s friend told Microsoft that he created his friend’s worm. He went on to say that not only Aber sasser, but also Netsky.AC, a variant of the worm, netsky was its creation. Sasser’s other partner, Sasser.E, was found shortly after his arrest. It was the only option that tried to remove other good worms from the infected computer, as Netsky does.
Yashan was charged with being of legal age as a minor because the German courts found that he created the worm before your dog was 18 years old. The worm itself was released during her 18th marriage (April 29, 2004). Sven Yashan was often accused of computer sabotage and illegal data alteration. On Friday July 8, 2005, he was sentenced to a 21-month suspended sentence.
Side Effects
A sign of a worm infection on a good and reliable PC is the presence of the files C: win.log , C: win2.log or C: WINDOWS avserve2. In the exe of this PC’s hard drive ftp.exe runs aimlessly and uses 100% CPU only because it seems to have been accidentally called by the LSA Shell (export version) due to erroneous code used throughout the worm. The worm’s most common symptom is the sleep timer, which in turn is triggered by the failure of the LSASS.exe worm.
Workarounds
The shutdown sequence can be interrupted by holding down the start button and using the startup effect to enter shutdown -a . This will cancel the system shutdown so that the user can continue what they were doing. The shutdown.exe directive is not available by default in Windows 2000, but can be installed from this Windows 2000 resource set. It is ready for use in Windows XP.The second way to prevent the worm from shutting down the netbook is to set an earlier time and / or counter reading on its clock; the stopping time will move into the person’s future as far as the clock is wound.
See Also
- Blaster
- Nachia (computer worm)
- BlueKeep (security vulnerability)
- Chronology of known computer virusesand worms.
External Links
- Microsoft Security Bulletin: MS04-011
- CAN-2003-0533
- Error ID 10108
- Find out exactly how to protect your computer here (Microsoft’s security page) – contains links to registration pages for major antivirus companies.
- New Windows worm in circulation (Slashdot article)
- Usually reports to the BBC about the effects of worms.
- Deutscher admits to founding Sasser (BBC News).
- Sasser Creator Still At Large (BBC News)
Speed up your computer's performance now with this simple download.
How exactly will this work? The worm is named Sasser because it spreads via a buffer overflow in the so-called Local Security Authority Subsystem Service (LSASS) component to infected operating systems. The worm transmits different ranges of IP addresses and communicates with victims’ computers mainly via TCP 445.
Blaster Worm was basically an antivirus program that in 2003 primarily targeted Microsoft platforms. The worm attacked programs using a vulnerability in Microsoft’s Remote Procedure Call (RPC) process using TCP port 135.
Sasser propagation points to a Windows vulnerability known as LSASS or Local Security Agency Subsystem Service. Sasser checks for random Internet Protocol addresses until a vulnerable system is found. Then it also copies it as an exe file to the Windows directory and starts the next time the computer starts.
