Sasser patching/clean up instructions
Posted by: [NT] on: 05/05/2004 12:21 PM [ Print | 2 comment(s) ] · 2104 views
Instructions for patching and cleaning vulnerable Windows 2000 and Windows XP systems:
Vulnerable Windows 2000 and Windows XP machines may have the LSASS.EXE process crash every time a malicious worm packet targets the vulnerable machine which can occur very shortly after the machine starts up and initializes the network stack.
When cleaning a machine that is vulnerable to the Sasser worm it is necessary to first prevent the LSASS.EXE process from crashing, which in turn causes the machine to reboot after a 60 second delay. This reboot cannot be aborted on Windows 2000 platforms using the Shutdown.exe or psshutdown.exe utilities and can interfere with the downloading and installation of the patch as well as removal of the worm.
www.ntcompatible.com
Vulnerable Windows 2000 and Windows XP machines may have the LSASS.EXE process crash every time a malicious worm packet targets the vulnerable machine which can occur very shortly after the machine starts up and initializes the network stack.
When cleaning a machine that is vulnerable to the Sasser worm it is necessary to first prevent the LSASS.EXE process from crashing, which in turn causes the machine to reboot after a 60 second delay. This reboot cannot be aborted on Windows 2000 platforms using the Shutdown.exe or psshutdown.exe utilities and can interfere with the downloading and installation of the patch as well as removal of the worm.
www.ntcompatible.com
« A first look at Progeny Debian 2.0 · Sasser patching/clean up instructions
· Thermaltake Polo735 - 3 in 1 CPU Cooler »
Comment
|
MagamiAKO Unregistered |
#53457 Posted on: 05/05/2004 12:45 PM
You know, people never learn do they? This freakin' thing should've been EASILY averted. It's amazing how many people don't have routers and/or have them set up as the DMZ 24/7. I mean I know computer junkies pay a lot of $ to do the computer work but nonetheless this is a problem that very easily could've been averted, regardless of Microsoft's flaw in the code. Amazing, isn't it? |
Comment
|
BetrayerX Unregistered |
#53459 Posted on: 05/05/2004 01:19 PM
I agree. Heck! some firewalls (software) are even free, yet people still fail to understand their importance. |
