How does the Sasser virus infect one's computer?

[Quetzal]

My computer was infected this morning.

[bratcatinok]

1. Is this the one that is

fixed by the patch found at http://v4.windowsupdate.microsoft.com/en/default.asp

Is this the worm or the virus? I'm unsure because I received notification of a critical update the middle of April and my AVG has been updating on an almost daily basis lately.

[Terry_M]

2. How often do you use windows update?

It uses a windows vulnerability that had a patch for it a month ago :P
It goes through a hole from another infected computer (possibly on the same network if yours is networked with others). It does not come from e-mail or infected downloads.

[Quetzal]

3. Ahh

I must have got it when I was at Kinkos with my labtop. I got rid of it though. It didn't do a lot of damage - it was just irritating.

Question - How does it get in the Network?

[huellewig]

9. From ..

http://arstechnica.com/

"Sasser avoids the usual e-mail or Internet Explorer tricks to propagate itself. Instead, it takes advantage of a weakness in Windows Local Security Authority Subsystem Service (LSASS) to infect unpatched PCs running Windows 2000, Windows XP, and Windows 2003 Server. After infection, it installs an FTP server on port 5554, creates a remote connection on port 445 to scan for other machines to infect, downloads itself to new targets, and then spawns hundreds of threads on the host, effectively bringing the system to a screeching halt."

I would suggest installing a firewall such as ZoneAlarm, it's free and helps prevent this type of thing. If you want to stay safe I would check out http://slashdot.org or Ars, as I linked to above, daily. They usually list things like this quickly so you know when to hit up Windows Update.

[Pale Blue Dot]

4. Well, what is does is

It takes normal straight-forward sentences and turns them over the dog feeble snarf.

[fearnobush]

5. It's important to download a removal tool as well.

After downloading and installing Microsoft's patch, you will also need to remove the worm from your system. The Microsoft patch prevents the worm from entering, but only a stinger tool will remove it from you system. for stinger tool:

<http://vil.nai.com/vil/stinger/>

[Renew Deal]

6. It's a pain in the ass, but no serious damage.

Scan your machine for free here.

http://housecall.trendmicro.com/

[benburch]

7. The infection starts...

when you fail to buy a Macintosh.

[Speck Tater]

8. Stay with Windows 98. It's immune to Sasser.

Every time MS releases a new version Windows they introduce more bugs. They'd be far better off fixing the versions that are already out there instead of creating new bugs by adding stupid features that nobody wants anyway.

Escpecially the new Playskool/Fisher-Price version of Windows called XP. What an ugly interface that is!!!! It makes you computer look like a kids plastic toy. And it slows down all your apps to boot.

Be smart, stay with Win/98.