PDA

View Full Version : Sasser - new virus (Windows 2000, XP, 2003)


JF
May 2nd, 2004, 07:28 AM
Hello,

According to antivirus editors, the new Sasser virus attacks through the TCP 445 port and then operates through ports 5554 and 9996.
(Sasser info from F-secure (http://www.f-secure.com/v-descs/sasser.shtml) )

Do you observe an important activity on port TCP 445 in the Log page of Look 'n' Stop ? (You can sort the logs by clicking on the columns headers. Ports are in the right column)

Once activated, Sasser shuts down the computer according to antivirus editor's analysis.

Regards,
JF


http://www.f-secure.com/virus-info/v-pics/sasser.jpg

redman
May 2nd, 2004, 01:49 PM
I'm observing some incomng connections to port 445 being blocked. Seems like LooknStop is doing a good job.