Parts Catalog Accessories Catalog How To Articles Tech Forums
Call Pelican Parts at 888-280-7799
Shopping Cart Cart | Project List | Order Status | Help



Go Back   PeachParts Mercedes-Benz Forum > General Discussions > Off-Topic Discussion

Reply
 
LinkBack Thread Tools Display Modes
  #1  
Old 05-06-2004, 11:38 AM
rickg's Avatar
User friendly
 
Join Date: Mar 2002
Location: Utah!!
Posts: 4,494
Sasser worm anyone?

Just wondering if anybody else got this stupid thing on their computer. My computer at home got it. Guess I need to add better virus and firewall software

__________________
past MB rides:
'68 220D
'68 220D(another one)
'67 230
'84 SD
Current rides:
'06 Lexus RX330
'93 Ford F-250
'96 Corvette
'99 Polaris 700 RMK sled
2011 Polaris Assault
'86 Yamaha TT350(good 'ol thumper)
Reply With Quote
  #2  
Old 05-06-2004, 11:45 AM
GermanStar's Avatar
Annelid wrangler
 
Join Date: Apr 2002
Location: Fountain Hills, AZ
Posts: 4,932
Yup -- I had it -- it was easy to see it running and I quickly removed it and visited Microsoft to install the latest critical updates. I guess I'd run a firewall if were smarter...
Reply With Quote
  #3  
Old 05-06-2004, 12:40 PM
MikeTangas's Avatar
Senior Member
 
Join Date: Apr 2000
Location: So. Cal
Posts: 4,430
Yup. Sasser.worm nailed my lap top Sunday night while reading in the Diesel Forum. Talked to the Webmaster Monday thinking it was somehow attached to the forum, learned it was a Microsoft weak link. Easy to remove manually while in safe mode, current anti-virus Dat files will find and destroy it, so get them current, plus Microsoft has a patch to close the security flaw. Took less than two hours to get back up and running full speed with the added benny of not having to reformat. Thankfully Sasser is more a PITA than a destructive virus.
__________________
Mike Tangas
'73 280SEL 4.5 (9/72)- RIP
Only 8,173 units built from 5/71 thru 11/72

'02 CLK320 Cabriolet - wifey's mid-life crisis

2012 VW Jetta Sportwagon TDI...at least its a diesel

Non illegitemae carborundum.
Reply With Quote
  #4  
Old 05-06-2004, 12:48 PM
GermanStar's Avatar
Annelid wrangler
 
Join Date: Apr 2002
Location: Fountain Hills, AZ
Posts: 4,932
The worm is harmless and very easy to remove. Ctrl-Alt-Del to end the process, delete the file from your Windows folder, then optionally remove it from your Start-Up list -- that's all there is to it. Then mosey on over to MS and install security updates. The whole deal took about 5 minutes. The worm kept changing my cursor, which made it very easy to spot.
Reply With Quote
  #5  
Old 05-06-2004, 12:50 PM
rickg's Avatar
User friendly
 
Join Date: Mar 2002
Location: Utah!!
Posts: 4,494
I tried using the 3-finger salute(ctl-alt-del), and it didn't work. But I have the removal process printed out from Microsoft, and will attack it tonite.
__________________
past MB rides:
'68 220D
'68 220D(another one)
'67 230
'84 SD
Current rides:
'06 Lexus RX330
'93 Ford F-250
'96 Corvette
'99 Polaris 700 RMK sled
2011 Polaris Assault
'86 Yamaha TT350(good 'ol thumper)
Reply With Quote
  #6  
Old 05-06-2004, 12:52 PM
GermanStar's Avatar
Annelid wrangler
 
Join Date: Apr 2002
Location: Fountain Hills, AZ
Posts: 4,932
Quote:
Originally posted by MikeTangas
Thankfully Sasser is more a PITA than a destructive virus.
Yes, Sasser is just a worm -- I could just about create a simple worm in my sleep. Worms are acts of sheer folly -- good viruses are acts of misguided genius.
Reply With Quote
  #7  
Old 05-06-2004, 12:54 PM
GermanStar's Avatar
Annelid wrangler
 
Join Date: Apr 2002
Location: Fountain Hills, AZ
Posts: 4,932
Quote:
Originally posted by rickg
I tried using the 3-finger salute(ctl-alt-del), and it didn't work. But I have the removal process printed out from Microsoft, and will attack it tonite.
Rick -- just Ctrl-Alt-Del, select the Processes tab and end the Process "avserve.exe". Then go to your Windows folder and delete the file "avserve.exe". That's really all there is to it...
Reply With Quote
  #8  
Old 05-06-2004, 01:49 PM
KenSilver's Avatar
Registered User
 
Join Date: Aug 2003
Location: New Zealand
Posts: 421
A question for the computer-savvy here...

This worm is harmless, but can a similar worm be made with more destructive capabilities? I'm worried Sasser might be a test phase and am nervously looking behind my shoulder.

By the way, I'm well protected, and my simple rule of never opening attachments except PDF has held me in good stead for the best part of 5 years - this being the time since I left Mac to change over to MS.

Now this - something that can sneak in while I surf!

Ken Silver
--------------
~1993 SL500, glistening triple black, xenons: http://www.kensilver.com/SL
~1999 SLK 230 Kompressor, silver/black leather, CD, immaculate (my wife's)
Reply With Quote
  #9  
Old 05-06-2004, 02:36 PM
sfloriII's Avatar
Still pedaling...
 
Join Date: Aug 2003
Location: Northern VA
Posts: 1,614
I suppose this'll be the one and only time I've ever been happy to have Microsoft Millenium Edition instead of the better XP! Millenium Edition is not vulnerable to the virus.

But I still get a pretty aggressive pop-up when I turn on the computer telling me that the sassir virus has been detected!
__________________

Current:
2014 VW Tiguan SEL 4Motion 43,000 miles.

2016 Hyundai Santa Fe Sport (wife's).

Past:
2006 Jetta TDI 135,970 miles. Sold Nov. '13.
1995 E-320 Special Edition. 220,200 miles. Sold Sept. '07.
1987 190-E 16 valve. 153,000 miles. Sold Feb. '06.
1980 300-D 225,000 miles. Donated to the National Kidney Foundation.
1980 240-D manual, 297,500 miles. Totaled by inattentive driver.
Reply With Quote
  #10  
Old 05-06-2004, 02:49 PM
GermanStar's Avatar
Annelid wrangler
 
Join Date: Apr 2002
Location: Fountain Hills, AZ
Posts: 4,932
Quote:
Originally posted by KenSilver

By the way, I'm well protected, and my simple rule of never opening attachments except PDF has held me in good stead for the best part of 5 years - this being the time since I left Mac to change over to MS.
Your simple rule won't protect you here. The worm is transfered over open IP addresses. It has nothing to do with email or file attachments. Without the latest security updates or a firewall, it can just magically show up on your hard drive.
Reply With Quote
  #11  
Old 05-06-2004, 02:58 PM
GermanStar's Avatar
Annelid wrangler
 
Join Date: Apr 2002
Location: Fountain Hills, AZ
Posts: 4,932
Quote:
Originally posted by KenSilver
A question for the computer-savvy here...

This worm is harmless, but can a similar worm be made with more destructive capabilities? I'm worried Sasser might be a test phase and am nervously looking behind my shoulder.
Yes, it absolutely could -- the trick is getting in the door, then getting it up and running, which Sasser already does. From that point, it could do almost anything its designer wants until it's stopped by anti-virus software. The problem is that if it does too much harm it will not be able to propagate. Think in terms of a parasite that kills its host -- in the long run, it's not very productive.
Reply With Quote
  #12  
Old 05-06-2004, 03:03 PM
rickg's Avatar
User friendly
 
Join Date: Mar 2002
Location: Utah!!
Posts: 4,494
Quote:
Originally posted by GermanStar
Rick -- just Ctrl-Alt-Del, select the Processes tab and end the Process "avserve.exe". Then go to your Windows folder and delete the file "avserve.exe". That's really all there is to it...
Ahh..Thanx. I was looking for the "Lssas.exe" thing.
__________________
past MB rides:
'68 220D
'68 220D(another one)
'67 230
'84 SD
Current rides:
'06 Lexus RX330
'93 Ford F-250
'96 Corvette
'99 Polaris 700 RMK sled
2011 Polaris Assault
'86 Yamaha TT350(good 'ol thumper)
Reply With Quote
  #13  
Old 05-06-2004, 05:09 PM
84300DT's Avatar
Senior Member
 
Join Date: Jan 2002
Location: Mass.
Posts: 2,219
to be stealth..

you can just use a router. they have built in firewalls which are highly effective.Further they don't mess up your internet access and/or programs, especially if you have more than one computer running on your dsl/cable connection.
__________________
1984 300D Turbo - 231k....totalled 11/30/07 RIP
Reply With Quote
  #14  
Old 05-06-2004, 05:35 PM
GermanStar's Avatar
Annelid wrangler
 
Join Date: Apr 2002
Location: Fountain Hills, AZ
Posts: 4,932
I use a router for my laptop, but it's not quite as fast as a direct connection.
Reply With Quote
  #15  
Old 05-06-2004, 06:02 PM
84300DT's Avatar
Senior Member
 
Join Date: Jan 2002
Location: Mass.
Posts: 2,219
wow you must have a fast connection then . my linksys router works at 100 mb/s
and i doubt my internet is running more than 800k/s on the download side at least.

__________________
1984 300D Turbo - 231k....totalled 11/30/07 RIP
Reply With Quote
Reply

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT -4. The time now is 11:47 PM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Search Engine Optimization by vBSEO 3.6.0
Copyright 2024 Pelican Parts, LLC - Posts may be archived for display on the Peach Parts or Pelican Parts Website -    DMCA Registered Agent Contact Page