Despite arrest, new variant of Sasser worm appears

One security firm blames an 'organized group of delinquents'

By David Legard

May 10, 2004 12:00 PM ET

Recommended

IDG News Service - Despite the arrest Friday of the suspected author of the Sasser worm that affected millions of computers worldwide last week (see story), a new variant of the worm appeared yesterday, according to computer security organizations.
This development shows that there is an "organized group of delinquents" engaged in creating and distributing these worms, security specialist Panda Software SL's PandaLabs unit said in a statement.
The Sasser.E worm exploits the same Microsoft Corp. Windows LSASS vulnerability targeted by its predecessors and has already infected millions of computers, according to PandaLabs. The situation is likely to get worse when company staffs return to work after the weekend.
Sasser.E searches the Internet for vulnerable computers and then copies itself to the Windows directory, leading to a systems error that forces the infected computer to reboot every 60 seconds.
Security company McAfee Inc. rated the worm as a low risk but noted that it attempts to confuse people trying to remove it by adopting the file name lsasss.exe, which is very similar to a genuine file name present on most systems.
The same patch that protected against earlier versions of Sasser are also effective against Sasser.E, security experts said.
The Sasser.E worm also tries to remove any instances of the Bagle worm from users' computers, suggesting that there is some rivalry between the virus-writing gangs, according to PandaLabs.
"This seems to indicate that there is a kind of cyberwar being waged among the creators of the Bagle, Mydoom, Netsky and Sasser worms, and it will continue to cause many more variants of the virus," PandaLabs said.

Reprinted with permission from

IDG.net
Story copyright 2009 International Data Group. All rights reserved.

Recommend Digg Twitter ShareThis

Email Print Send Feedback Reprints

Jump to comments

Viruses

Additional Resources

WHITE PAPER

Do You Know the 7 Steps to Successful Data Migration?

Approximately 60 percent of data migration projects overrun time or budget, while some fail completely. Download this white paper, "Enhancing Your Chance for Successful Data Migration," to learn the critical steps you need to take to execute a data migration project with minimum cost and risk to your business.

WHITE PAPER

Total Cost of Ownership of Server Computing Vs. PCs

Read the Gartner research note to learn why the TCO of a server-based computing deployment used to deliver all applications to users is around 50% lower than that of an unmanaged desktop deployment.

WHITE PAPER

IDC White Paper: Linux in a Global Recession

Economic downturns have a tendency to accelerate emerging technologies, boost the adoption of effective solutions, and punish solutions that are not cost competitive or that are out of synch with industry trends. This IDC White Paper presents the results of an IDC survey of 330 companies in Western Europe, Asia/Pacific and the Americas that measures the receptiveness to Linux and takes into consideration changing views driven by the disruptive economic environment that businesses face today.

White Papers & Webcasts

Informatica 9 Launch: Transform your Business. Transform your world.

LIVE Nov 10, 2009 12:00 PM ET

Architecting Business Intelligence Applications for Change: The Open Solution

LIVE Nov 12, 2009 02:00 PM ET

Forrester Consulting - Optimizing Users and Applications in a Mobile World
Learn how to successfully deploy a WAN optimization solution that is specifically tuned for a mobile environment!

IDC Webcast: Linux Adoption in a Global Recession
Access this webcast, compliments of Novell and HP, for a limited time only!

Faster, Cheaper and Easier to Maintain
Can you afford not to upgrade your servers to today's advanced, energy-efficient technologies?

Bringing Order and Security to your Mobile Workforce: Corporate Mobility Policy and Device Management
Download this webcast, free, compliments of Nokia.

The State of PCI DSS Compliance at Organizations Today
Download this resource today!

Top to Bottom Performance Management Excellence at the City of Chicago
View now.

IDC Research Report: The Business Value of Consolidating on Energy-Efficient Servers
Download this Resource Now!

Effectively Implementing Datacenter Automation
Effectively select and deploy the best datacenter automation solution today!

HP Technology Guide for Scalable Business Solutions
Download This Resource Now!

Aligning IT to Business: The Rising Importance of Application Delivery Networks
Application Delivery Networking (ADN) will play a vital role in helping enterprises incorporate strategic technologies to achieve business initiatives.

All White Papers | All Webcasts