Re: Sasser in ms updates?

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 05/03/04


Date: Mon, 03 May 2004 13:01:24 +0200

Pieter van Kampen wrote:

> During the install of the following critical updates from windows update,
> Norton Antivirus reported that the file "6873_up.exe" contains
> W32.Sasser.C.Worm, found with realtime scan. There was no other activity on
> my PC, so I assume this file was placed on it with one of the critical
> updates.
>
> The following updates were being downloaded:
> (snip hotfix list)
Hi

No, Sasser uses ports on your network connection to infect you, so it
is very unlikely that you got this one from Microsoft.

I see that KB835732 is not in the list of updates you installed, so
if you don't already have installed KB835732, you are vulnerable to
Sasser attacks.

You can install KB835732 from here:
http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/community/scriptcenter/default.mspx


Relevant Pages

  • Re: XP Service Pack 2 in silent mode
    ... I use this application to scan for available updates, download the updates and install them. ... When I launch my tool the user interface comes up for XP SP2. ... torgeir, Microsoft MVP Scripting, Porsgrunn Norway ...
    (microsoft.public.windowsupdate)
  • "View Installation History" for WU5 without using the WU Web site
    ... Below is a VBScript that extracts information about installed updates ... Tested on Windows XP SP2 only. ... Install mechanism: WindowsUpdate ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.general)
  • "View Installation History" for WU5 without using the WU Web site
    ... Below is a VBScript that extracts information about installed updates ... Tested on Windows XP SP2 only. ... Install mechanism: WindowsUpdate ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsupdate)
  • Re: XP SP2 Download Failure, error code 80072F78
    ... > download and get to the Install button. ... When I check in the Install ... all the updates have error code 80072F78. ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsupdate)
  • Re: Windows update wont update!
    ... > Install or Yes to install the software. ... > page (I accepted the certificate btw). ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsupdate)

Loading