Sasser - new virus (Windows 2000, XP, 2003)

Discussion in 'LnS English Forum' started by JF, May 2, 2004.

Thread Status:
Not open for further replies.
  1. JF

    JF LnS Support

    Joined:
    Jan 12, 2003
    Posts:
    294
    Hello,

    According to antivirus editors, the new Sasser virus attacks through the TCP 445 port and then operates through ports 5554 and 9996.
    (Sasser info from F-secure )

    Do you observe an important activity on port TCP 445 in the Log page of Look 'n' Stop ? (You can sort the logs by clicking on the columns headers. Ports are in the right column)

    Once activated, Sasser shuts down the computer according to antivirus editor's analysis.

    Regards,
    JF


    http://www.f-secure.com/virus-info/v-pics/sasser.jpg
     
  2. redman

    redman Registered Member

    Joined:
    Apr 16, 2004
    Posts:
    41
    I'm observing some incomng connections to port 445 being blocked. Seems like LooknStop is doing a good job.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.