Sasser has new name!

[Themuppeteer]

Hello,
We are currently wrestling in the company with sasser,but different versions of it.
My pc was infected with sasser but the file name was SKYNETAVE.EXE ,the file stood in the windows directory.
Kill the process, remove the file SKYNETAVE.EXE and remove it from the registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run

Strangely enough, I could not find anything of it in google.


Greetz,

NOSPAM_themuppeteer@hotmail.com (for mails, remove the NOSPAM_)

http://www.themuppeteer.tk

"Those who say they understand chess, understand nothing"

-- Robert HUBNER

 

[Sympology]

It's Sasser-d

Check out Sophos for info

http://www.sophos.com/virusinfo/analyses/w32sasserd.html

2 decades from retirement, 2 minutes from a breakdown

 

[allteltec]

Checked my router logs last night, had a lot of hits on Port 445, StuReeves tks. for the heads up on the port info.