New Windows Worm on the Loose

Dynamoo writes "The Internet Storm Center has issued a Yellow Alert due to the spread of the Sasser worm exploiting Windows 2000 and XP machines through a documented flaw in the Local Security Authority Subsystem Service (LSASS) as described in Microsoft Bulletin MS04-011. Initial analysis seems to indicate classic Blaster-style worm behaviour. Right now I'm just getting a probe every 10 minutes or so on my firewall, but this is bound to escalate sharply as the pool of infected machines grows. Of course all good Windows-using Slashdotters visit Windows Update regularly and have a firewall, don't you? More information at Computer Associates, F-Secure, Symantec and McAfee."

Comments

Shocking!

[focitrixilous P]

Slashdot continues it's trend of releasing news that will shake your beliefs to the core! I thought for sure the previous worm was the last possible one!

Oxymoron

[ArbiterOne]

Windows-using != Slashdotters. There's a contradiction right there.

Re:I Use X Windows

[GreyPoopon]

Windows update rarely requires more than a click on an "I accept" button, and one reboot.

Assuming that you only have one patch to install... Where I work, they create a periodic image with the OS and all the other goodies we use. When a machine has to be re-imaged, the user gets to spend the next several HOURS installing patches. This is because there are about 50 billion patches since last September, and must of them must be installed exclusively of any others, followed by a reboot. Although each patch only takes about 10 minutes or so to download and install, you have to add at least another 5 minutes per reboot (longer for the Windows 2000 machines that spend nearly ten minutes "saving your settings..."), and it really takes a LONG time to get through the process. Anybody that has to have their machine re-imaged prepares for a full day of lost productivity.

Re:I Use X Windows

[TCaptain]

Get a clue yourself "jerkoff"

rarely do you only reboot once when installing updates.

even worse on a fresh "reinstall" (another quaint windows custom)