Worm unleashed that exploits latest Windows security holes, Microsoft warn

Worm unleashed that exploits latest Windows security holes, Microsoft warns
News Story by Sharon Machlis

MAY 02, 2004 (COMPUTERWORLD) - Microsoft Corp. issued an unusual weekend security warning Saturday that a worm has been unleashed on the Internet taking advantage of a security hole announced publicly last month (see story). Microsoft once again urged users to install its most recent critical Windows updates.

"Microsoft has verified that the worm exploits the Local Security Authority Subsystem Service (LSASS) issue addressed in Microsoft Security Update MS04-011 on April 13, 2004," the company said in an announcement posted yesterday and updated 3 a.m. PDT this morning. In its security update, Microsoft included a tool that checks for system infection by the Sasser worm.

Versions of Windows XP and 2000 are vulnerable, although not XP 64-Bit Edition Version 2003, Microsoft said.

Some users may be reluctant to apply the patches, however, since there have been reports that the fixes create new system problems, such as causing some systems to slow down or stop responding (see story).

more...http://www.computerworld.com/securitytopics/security/virus/story/0,10801,92851,00.html?SKC=news92851

my frickin' virus scan has been going gangbusters lately, everytime I log on there is an update.

Haven't noted any problems

Now, I am hearing from friends who have them that they would never,
ever go back to using a PC. I'm not due for a replacement for a
while, I hope, but I'm thinking about investing in a Mac next time.
Especially since you can apparently now get just about all the
programs you get for PCs with little trouble.

and a Linux user too. I did send out some e-mails to the family to let them know to hit up Windows update and update their anti-virus software.

I downloaded the updates a week ago and my computer is ok.

new virus updates from Norton (Symantec) today and yesterday. Yesterday, the computer went to snag Windows updates from Microsoft. I didn't let it download (it does it automatically) them though. Wasn't sure whether to get them or not. ?

I've neevr seen anything like it, it's like the moe securit updates are made, the worse the situation becoms for XP home users :argh: NO wonder she enjoyd our trip to the Tysons Corner Apple Store yesterday!

significant degradation of performance.

As I mentioned in the earlier post - my computer automatically went to the Windows site to look for the upgrades required.

I just went there and checked and it scanned for updates and it said there weren't any critical ones needed at this time.

I did d/l the update a couple of weeks ago - that one was a critical one. :shrug:

On my WinXP and 2000 systems I have the Automatic update programs for both MS updates and McAfee anti-virus updates scheduled to complete automatically early in the morning. My firewall software is automatically set to look for updates. Absolutely necessary with a 24/7 high speed connection. Of course I've had no problem with my FreeBSD system.

Is Windows 98 affected?

n/t

.
.
.

That's why I'm keeping my Win98SE until it just won't work anymore

And dial-up is safer too,

most hackers don't target dial-up because it's too slow.

I'm on-line up to 16 hours a day, only running AVG 6.0(Grisoft), no firewall, and all I've picked up in over 2 years is a couple of "dialers"

I'll stick to slow and safe -

Then my computer died. Just fell over face-in-the-soup style, without even having the grace to let me know it wasn't feeling well. So, now I'm running an XP box, and really, REALLY getting serious about switching to Linux. I'll give this one to hubby when I get my Linux (dual boot with my old Win98 installed for legacy files) set up. It was the only way I could justify buying a brand new 'puter, since I'm not currently making any money myself.

had my new computer built locally and put Windows 98SE on it. I'll never go to XP because of the registration garbage, and don't need 2000. Not many virii are written for 98 anymore.

Oh, by the way, Hi Mike :hi:
I just talked to the Santa Claus, the Easter Bunny and the Tooth Fairy. Since you've been such a good boy, Santa said he is giving you a new tricycle for Christmas, the Easter Bunny is putting extra peeps in your basket and the Tooth Fairy despite the fact she might cause inflation, will be giving you 25 cents instead of a nickel for your next tooth. :bounce:

I've been running my ass off trying to patch all my user's PCs... several laptop owners were travelling, won't be updated until tomorrow or Tuesday... did I say crap ? Please let them stay off the net....

I don't want to update my PC and install XP instead of my old (not that much unstable and unreliable)98SE. My friends can keep on laughing at my old fashionned abits !;)

Just install the 98 drivers for any hardware you get.

and I cant afford to fix it. so, now I am on my husbands computer, a MAC. Thats why I cant post much.

This worm does not have a destructive payload - it just causes a very large amount of traffic, and can overwhelm a machine. It does not delete or overwrite or alter files. Your machine is definitely not ruined - not by this worm, at least. It's primary threat is that it massively slows a computer down, and the traffic it generates can cripple corporate networks.

Symantec has posted a removal tool for two of the three current variants. All you should have to do is disbale the active worm process, then run this tool.

Steps to stop the process are about halfway down this page:

When you are done, spend the $40 and buy Symantec Anti-Virus, and keep the definitions up-to-date - they get updated every Tuesday. Also, go to Microsoft's windowsupdate.com website at least once a month - critical patches are released on the second Tuesday of every month. That, and use a firewall, especially if you have broadband, and your machine will be fairly safe.

I'll fix it free if you want, but I need the operating system.

edit: PM me if you want me to...

there might be a fix for it.

Another worm to exploit the Windows security holes. I'd be more surprised if there was a worm that didn't exploit the Windows security holes! :eyes:

when I sign on... for the past week, every day, there is a new security update I need to download.