Nessus Plugin #12220

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

W32.Sasser.Worm

Family:

Windows

Category:

infos

Copyright:

This script is Copyright (C) 2004 Jeff Adams

Summary:

Determines if Machine is infected with W32.Sasser.Worm

Version:

$Revision: 1.3 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

-

Description:

W32.Sasser.Worm Infection.
W32.Sasser.Worm is a worm that attempts to exploit the MS04-011 vulnerability.
It spreads by scanning randomly-chosen IP addresses for vulnerable systems.
This plugin checks for W32.Sasser.Worm, W32.Sasser.B.Worm
and W32.Sasser.Ci.Worm Variants.

Solution : Use Latest Anti Virus to clean machine. Virus Definitions and removal tools are being released as of 05/01/04

Risk factor : High