Sonicwall Signatures


Go to All Categories list.

Sasser.B_2 is a Worm. Worms spread from computer to computer, making copies of themselves over the network. They could spread over email, IM, peer-to-peer networks, or directly over the wire by leveraging vulnerabilities. Sasser.B_2 has a file size of 83,456 bytes. It also changes Windows registry:
  • Creates key "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce".
  • Sets value "wextract_cleanup0"="rundll32.exe C:\WINDOWS\SYSTEM32\advpack.dll,DelNodeRunDLL32 "C:\WINDOWS\TEMP\IXP0.TMP\"" in key "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce".

Relevant Information