Saturday, August 18, 2007

lsass.exe

Tags: , ,

There's a nasty little computer bug making the rounds... you may get a strange warning message that says the machine is being shutdown. Your net connection speed will be lower than usual. You may see net activity registering even when your computer is idle. You may be tempted to re-install your operating system, to no avail. This is Sasser: check to see if the process lsass.exe is running. Here's how to get rid of this nasty little bugger: Sasser Removal.

W32.Sasser.Worm
W32.Sasser.B.Worm
W32.Sasser.C.Worm
W32.Sasser.D
W32.Sasser.E.Worm
W32.Sasser.G

The W32.Sasser family of worms affects computers running vulnerable versions of the Microsoft operating systems Windows XP and Windows 2000. Sasser can run on (but not infect) Windows 95/98/Me computers. Although these operating systems cannot be infected themselves, they can infect vulnerable systems that they are able to connect to. In this case, the worm will waste a lot of resources so that programs cannot run properly.

Download Symantec Removal Tool

Sasser seems to be making a bit of a comeback... it was first noticed and started spreading in the wild on April 30, 2004. This worm was named Sasser because it spreads by exploiting a buffer overflow in the component known as LSASS (Local Security Authority Subsystem Service) on the affected operating systems. The worm scans different ranges of IP addresses and connects to victims' computers primarily through TCP port 445. Microsoft's analysis of the worm indicates that it may also spread through port 139.


Show Comments: OR

No comments:

Post a Comment


COMMENTING FEES
Per comment rate: $2
Payable by either clicking the BitCoin "tip me" button or the PayPal "donate" button in the sidebar.

WAIT, WHY DO I HAVE TO PAY TO COMMENT?
Because, like the fine publication Tablet, whom I borrowed this concept from, I too am committed to bringing you the best, smartest, most enlightening and entertaining reporting and writing I'm able to provide, all free of charge. I take pride in my loyal readership, and I'm thrilled that you choose to engage with me in a way that is both thoughtful and thought-provoking. But the Internet, for all of its wonders, poses challenges to civilized and constructive discussion, allowing vocal—and, often, anonymous—minorities to drag it down with invective (and worse).

I'm asking people who'd like to post comments on my blog to pay a nominal fee—less a paywall than a gesture of your own commitment to the cause of great conversation. All proceeds go to helping me bring you the provocative and/or entertaining articles that brought you here in the first place.

I NEED TO BE HEARD! BUT I DONT WANT TO PAY.
Readers can still interact with me FREE of charge via Facebook comments and Google+ comments! You can also reach me via Twitter @davelucas

I hope this new largely symbolic measure will help create a more pleasant and cultivated environment for all! Those of you who choose to contribute, thanks for your support.

IMPORTANT:

Your comment will appear after you have made your donation.

All IP addresses are logged.

Your comment will not appear immediately as all messages are vetted before publication.

PS - Any more questions? Check out my Policy & Terms of Use FAQ!

Related Posts Plugin for WordPress, Blogger...
Web Analytics