Sasser - new virus (Windows 2000, XP, 2003)

Discussion in 'LnS English Forum' started by JF, May 2, 2004.

Thread Status:
Not open for further replies.
  1. JF

    JF LnS Support

    Joined:
    Jan 12, 2003
    Posts:
    294
    Hello,

    According to antivirus editors, the new Sasser virus attacks through the TCP 445 port and then operates through ports 5554 and 9996.
    (Sasser info from F-secure )

    Do you observe an important activity on port TCP 445 in the Log page of Look 'n' Stop ? (You can sort the logs by clicking on the columns headers. Ports are in the right column)

    Once activated, Sasser shuts down the computer according to antivirus editor's analysis.

    Regards,
    JF


    http://www.f-secure.com/virus-info/v-pics/sasser.jpg
     
  2. redman

    redman Registered Member

    Joined:
    Apr 16, 2004
    Posts:
    41
    I'm observing some incomng connections to port 445 being blocked. Seems like LooknStop is doing a good job.
     
Thread Status:
Not open for further replies.