Slammer Worm

[sineados]

Hi,

We are using SQL Server 2000 and I have Enterprise Manager on my local machine. When EM is open the firewall says that the Slammer Worm is active. When I close it down it goes away. I have read all the Microsoft info on it and their best solution was to install the SP3 which we have done, but it is still trying to break through the firewall.

Has anyone else had to deal with this and did it go away, or can you recommend any good SQL Server sites where I might get the answer.


thanks,
Sinead

 

[osjohnm]

Hi

By the sound of things you might already have the slammer virus but I might be wrong. If you have got it then I'm not sure if SP3 will remove it but I do know that SP3 will ensure that you don't get it.

As for more info search in the forum's keyword search for "Slammer" or "Service Pack 3". There were a lot of threads about this when the virus hit.

You can have a look at the following website for some more articles or links:

http://www.sqlsecurity.com

Hope this helps

John

 

[appi]

Hi,
I agree with John. It seemsyou've got that virus on your SQL-Server. So you must remove it with Anti-Virus-Tools.
SP3 only give you the secuity that this worm could not attack your Database, but if it's in it will be bad.
Look for an Virus-Tool like Norton or McAfee to delete/destroy this worm. Than you're safe
regards
Uwe

 

[osjohnm]

Hi again

In this thread Terry posted a link to some tools that Microsoft made available to assist with the Slammer Virus.

thread183-465974

The following thread contains more resources on fighting the slammer virus.

thread183-457966

Hope this helps

John

 

[sineados]

Thanks for your help. I have followed the Microsoft suggestions and even ran a Removal tool from Symantec which says the virus is not there, yet it keeps coming up when I access the database using Enterprise Manager on my local machine. I installed the SP3 on my machine as well but am not running SQL server on it.

We are going to try and reboot the SQL Server machine again in the morning and see what happens.And I might run the Virus checker as well.

thanks again,
Sinead

 

[SQLBill]

You say you are not running SQL Server on your machine. But you are using Enterprise Manager. In that case, you probably have MSDE installed (this installs as part of several third-party applications that use databases). There is a DIFFERENT Service Pack that needs to be applied to all copies of MSDE. Check out the links provided and Microsoft's web site. I'm willing to bet you have an infected MSDE not an infected SQL Server.

-SQLBill