Yup, it's the Sasser-F. That's what they are saying at PC World:
"It makes sense that this is a variant of the [Sasser-A] source code. It's been out for more than a week and made the rounds of whatever computing underground [Sven Jaschan] was connected to. Now somebody has had a chance to play with it," [Brad Smith, senior vice president and general counsel at Microsoft] says.
And there was this from InfoWorld :
[Patrick Hinojosa, chief technology officer of Panda Software U.S. ] called the changes to Sasser-F "child-like." The changes include a switching the name of a process created by the worm to "Bill Gates," and the addition of new comments containing expletives, Hinojosa said.
Microsoft's Sasser (A-E) Worm Removal Tool (KB841720) hasn't yet added the "F" variation.
Comments