Sasser

Hello All:
Ive always appreciated your help here and would like some advice. I was last on my pc at home on friday april 30. i updated my norton definations and ran a full scan. Im at work today and am reading about this sasser worm. I have not yet downloaded the MS patches for XP from April 13th (specifically XP-KB835732). When i turn on my pc at home for the first time tonight, what should i do right away? update my Norton definations (im not sure the April 30th around 5 pm had this on its update)? install the xp patch from MS? Im asking because im hearing infection is happening within minutes of connecting to the internet. I guess another option is to bring in a cd to work tomorrow and save the MS patch to there and install on my pc without connecting to the net (its too big for the floppies i have here)..Any advice would be appreciated

 

Best option is what you said, stay off the net until you install patch from cd. Or, if you want to take a chance online, download MS patch first, then grab sasser tool from MG (just in case), then update your AV.

 

Thats probably a good idea. If youre on 56k, you probably wont have nearly enough time.

I would install the patch BEFORE you update Norton. Once youre patched you hopefully cannot be infected, so you have time to update Notron. I think Norton has a firewall in it, which might stop the worm getting in (ive not heard anything to state the contrary).

EDIT : whoa bill beat me to it

 

GMTA Goldie

 

GMAG!!
great minds also google

 

thanks..i did save the sasser fix to a floppy to have that at home..i do have a cable modem connection, not dial up...do you think i should do all five of those april 13th patches via cd or is it ok to do the kb835732 on cd then install that before going on net..then update definations..then go to ms update to get the other four?

 

Hey sasser. When I downloaded that set of patches I had to try kb835732 a couple of times before it would download. So I'd say, if you have it on cd, get it installed from the cd first then get the others.

 

I'd make sure you got the sasser patch before you go online, and then go on WU and get up to date with all the rest too. Then update definitions.