May 4, 2004

1. Level 4 Virus Alert! W32.Sasser.B Worm

W32.Sasser.B.Worm is a variant of W32.Sasser.Worm. It attempts to exploit
the LSASS vulnerability described in following Microsoft Security Bulletin
MS04-011: http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx

The worm spreads by scanning randomly selected IP addresses of vulnerable systems. The following write-up will be updated when additional information about
the worm is available. Check the write-up frequently for updated information.

http://www.symantec.com/techsupp/vURL.cgi/sctyrsp4

Also Known As: WORM_SASSER.B [Trend], W32/Sasser.worm.b [McAfee]
Type: Worm
Infection Length: 15872 bytes
Systems Affected: Windows 2000, Windows Server 2003, Windows XP
Systems Not Affected: Linux, Macintosh, UNIX, Windows 3.x
_____________________________

2. Virus Definitions

Symantec Definitions dated May 1, 2004 will detect the W32.Sasser.B Worm.

Run LiveUpdate or download the Intelligent Updater virus definitions at:

http://securityresponse.symantec.com/avcenter/defs.download.html

Thanks for visiting!
Jim Hanus
www.AllAboutRichmond.com
email: list@allaboutrichmond.com