Re: Would a firewall prevent Sasser worm?

From: Nimrod (nimrod_at_nimrods.org)
Date: 05/07/04 

Date: Thu, 06 May 2004 23:18:57 GMT

On Tue, 04 May 2004 08:33:32 GMT, Piotr Makley <pmakley@mail.com>
wrote:

>If I had a firewall would that prevent the Sasser worm infecting my
>PC?
>
>I mean, if another infected system cannot see my ports because they
>are stealthed then presumably Sasser could not infect me?

I was installing Windows 2000 for the first time over the weekend on a
brand new machine. (Lucky me)

The minute I installed and connected to internet via DSL my machine
started to give me the countdown warning.

I thought I had bought a hunk of junk and had a hardware problem.

Fortunately, doing a search on lsass.exe lead me to the conclusion
that I was fighting off that same attack everyone else was. I had to
beg Verizon to re-enable my dial-up service.

Within minutes of connecting to the internet I got two worms not just
one. I think Verizon's servers must have been infected.

I just count myself lucky that I got things fixed rather quickly and
now have Norton Personal Firewall and Anti-virus doing their thing.

I had no idea you could get a worm on your machine without opening
email. Maybe next time I will install the firewall software before I
connect to the internet for the first time.

-RJ

Relevant Pages

  • Re: Zone alarm
    ... internet to check for updated versions. ... order for new programs to run the first time in case they are ... Or even to allow registry changes when programs are ... you are installing reputable software then you generally allow them all ...
    (uk.comp.homebuilt)
  • Re: computer virus usegroups
    ... New Virus Stealing Information from Computer Users ... You can infect ... attempt to download from a Russian website. ... Internet Explorer to protect users of its Internet Explorer browsers ...
    (sci.med.diseases.lyme)
  • Re: Bet You Cant Fix This
    ... >happening after installing anything in particular? ... Uninstall, ... >You should also empty your Internet Explorer Temporary ... >You should also verify that your System Restore feature ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: browser problem
    ... Tried installing history ... Google Toolbar advice section for these.) ... to have something running like antivirus software - and it prevents browser ... Empty your Temporary Internet Files and shrink the size it stores to about ...
    (microsoft.public.windowsxp.security_admin)
  • Re: NTAUTHORITYSYSTEM?
    ... > installing things, ... to have something running like antivirus software - and it prevents browser ... Empty your Temporary Internet Files and shrink the size it stores to about ... Once it is done, click OK, close Internet Explorer ...
    (microsoft.public.windowsxp.help_and_support)