Shoutbox

Finding the exploit in lsass.exe (listens on port 445, Windows File and Printer sharing server) is the hard bit. Since every XP (2000 too possibly) machine out there listens on that port, it meant that some 200 million computers were vulnerable.

Writing the virus that exploited it, etc, wasn't the hard bit.

And I believe your computer restarted sometimes because the buffer overflow occasionally crashed lsass.exe.

quote:

---

Originally posted by Shawnz
no thats msblaser leo

---

Oh, then I never got it.

the sasser worm effects new computers there was a test a normal xp pc was set it with no firewall or any protection and connected to the internet after 7 minutes it was infected with the sasser worm

Sasser is very well known and scans come in with every windows update. Can someone tell me the damage it does?

iirc another virus writer got offered a job at Ksapery Anti-Virus for when he leaves prison.

quote:

---

Originally posted by Absorbation
the sasser worm effects new computers there was a test a normal xp pc was set it with no firewall or any protection and connected to the internet after 7 minutes it was infected with the sasser worm

---

Thats what happened to me. I didn't have a firewall and had just set up my internet on my new Windows XP, and i got infected. I installed Kaspersky a day after i got connected, which was kind of stupid, but i didn't expect to be infected that quickly just from being on the internet.

quote:

---

Originally posted by Segosa
And I believe your computer restarted sometimes because the buffer overflow occasionally crashed lsass.exe.

---

Yeah, it did. It came up with an error window saying the computer will restart in 60 seconds, then it counted down. Damn annoying it was.

lol scary but i didn't get it so...

Recently they reported the average time to get infected after connecting an unpatched XP machine to the internet dropped from 16 minutes down to 12 minutes (Slashdot), though in reality the time you'd experience would be much lower.

Note that the Sasser virus isn't the only one that used the exploit in lsass.exe. Since it was made public thousands of botnets use that exploit to spread, so being infected via that exploit doesn't necessarily mean you got the Sasser virus. You could have any.

quote:

---

Originally posted by Reaper66613
wow
what are the germans upto?! they are planning our doom. RUN AWAY

---

Europe did that proir to the war. look what happened then

quote:

---

Originally posted by fatfreechicken
Hear about the one who made a virus that printed off his CV and then threatened to write more viruses if he didnt get a job?

What is the world coming to

---

y didnt i think of that?

quote:

---

Originally posted by monster.rat

quote:

---

Originally posted by Absorbation
the sasser worm effects new computers there was a test a normal xp pc was set it with no firewall or any protection and connected to the internet after 7 minutes it was infected with the sasser worm

---

Thats what happened to me. I didn't have a firewall and had just set up my internet on my new Windows XP, and i got infected. I installed Kaspersky a day after i got connected, which was kind of stupid, but i didn't expect to be infected that quickly just from being on the internet.

quote:

---

Originally posted by Segosa
And I believe your computer restarted sometimes because the buffer overflow occasionally crashed lsass.exe.

---

Yeah, it did. It came up with an error window saying the computer will restart in 60 seconds, then it counted down. Damn annoying it was.

---

I had the same thing. I thought it was microsoft hacking me because i have a pirate copy. I mean no i dont

quote:

---

I had the same thing. I thought it was microsoft hacking me because i have a pirate copy. I mean no i dont

---

That wasn't a smart move...

Oh I'll just copy out a clip I read in a magazine:

quote:

---

Quote from PCAuthority Magazine
Free XP for pirates
Microsoft has launched a new initiative offering a free copy of XP Pro to users with illegal versions IF they can supply the receipt and disk they got their warez version from. The Windows Genuine project is aimed at US users but may spread as the giant steps up validation requirements for its lates downloads. MS hope to use the technique to stamp out counterfeiters.

---

quote:

---

Originally posted by Absorbation

The sasser worm effects new computers there was a test a normal xp pc was set it with no firewall or any protection and connected to the internet after 7 minutes it was infected with the sasser worm

---

Scary. I don't get how you can get a virus if you just leave it on the internet.
How can I prevent myself from getting a virus like this? I can't get firewalls work