Re: What steps to prevent Sasser infection while downloading the fix?

From: Marc Liron MVP (anonymous_at_discussions.microsoft.com)
Date: 05/04/04 

Date: Tue, 4 May 2004 02:15:13 -0700

Also be aware that there is a new Netsky worm variant
(Netsky-AC) just out that claims to be able ti "fix" the
sasser worm vulnerability!

Of course it comes with an attachment that once clicked
deploys its own payload to cause yet more problems...

http://www.sasser-worm.com

Marc Liron
Microsoft MVP
http://www.updatexp.com

>-----Original Message-----
>Firewall your system. Then download the patch.
>
>--
>Regards:
>
>Richard Urban
>
>aka Crusty (-: Old B@stard :-)
>
>"Piotr Makley" <pmakley@mail.com> wrote in message
>news:8e3efe3c458193b1dabd01bcc97e8ccd@news.teranews.com..
.
>> If someone has not patched their PC with Microsoft's
fix then maybe
>> they will get infected with Sasser when they connect
to the Net to
>> actually download the fix for Sasser!
>>
>> Are there any steps that can be taken to allow the
Sasser fix to be
>> downloaded but which will prevent Sasser from
infecting the
>> machine?
>>
>> Maybe switch off some of the Component Services?
>> Maybe enable your firewall to a "high" level of
security?
>> Maybe rename some EXE or DLL file until the fix is
installed?
>> etc
>
>
>.
>

Relevant Pages