sasser removal problems

From: sai nandoor (anonymous_at_discussions.microsoft.com)
Date: 05/06/04 

Date: Thu, 6 May 2004 12:15:26 -0700

Hi All,
I tried using multiple sasser removal tools listed on the
MS website and they all come back saying that sasser was
removed successfully, but when I tried connecting to the
internet I am still not able to access any sites, its
taking too long and timing out. I see there is a lot of
traffic on port 445(I guessing caused by sasser). Is there
a way to cleanup that port, or maybe even change the valid
apps that use that port on to a different port. Thanks.

Relevant Pages

  • Re: Wer oder was ist mit meinem Rechner connected
    ... Der lokale Port ist jedesmal 445, ... MaW, das ist ein Teil von NetBIOS. ... Und außerdem der Port, auf den Sasser ...
    (microsoft.public.de.security.heimanwender)
  • Re: closing port 445
    ... > I see that several services use port 445 in winxp: ... > netbios over tcp/ip, and others. ... > disable netbios over tcp/ip for the internet connection? ... > sasser uses would be closed. ...
    (microsoft.public.security.virus)
  • Re: Will the Sasser worm become the next Blaster?
    ... > if you simply port scan for Sasser you get many false positives, ... > reply though in the first packet, it's Sasser. ... To cut down on false positives, I tried scanning for BOTH 5554/tcp AND ...
    (Bugtraq)
  • Re: windows socket error
    ... What You Should Know About the Sasser Worm and Its Variants ... Sasser Worm Removal Tool ... > The box says: Windows socket error: Only one usage of each socket ... > port somewhere but I need to know how to get to it. ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Sasser question
    ... instructions at the Microsoft sasser website:- ... >Step 2: Stop the Shutdown Cycle ...
    (microsoft.public.security)