W32 MS Slammer Worm

This virus got quite a lot of publicity due to the fact that it was the first pandemic worm since Nimda. It affected entire world and created disturbances on the stock market.

What it uses to spread around? It is a worm that uses vulnerability in MS SQL Server (Vulnerability had been discovered and patch issued months before Slammer Work attack. but it did not stop it). Worm sends specially formatted data to this particular vulnerability on every computer it can see on the Internet. If unpatched version of MS SQL Server is running that data will be received and processed. Computer will be taken over by the worm while data processed.

What is particular interesting about this worm that it teaches few lessons:

• Updating Windows and Antiviruses is not enough. All software installed must be patched;
• Knowledge what is exactly installed on your computers is important. Microsoft SQL Desktop Engine could be installed as part of other software packages and open security hole in the shining armor of your computer;
• Extreme care should be used when new software is installed on computers exposed to the Internet;

If you have MS SQL Server on your computer don't forget to get patch from Microsoft site at

<http://www.microsoft.com/sql/downloads/2000/sp3.asp>