• Comments (0)
• Report
• Tell a Friend
• Print
• Screenshots

W32.SQLExp.Worm Removal Tool determines whether the vulnerable DLL exists on the computer, locates the worm thread in the sqlserver.exe.

Features of W32.SQLExp.Worm Removal Tool 1.0.4.1:

· Determines whether the vulnerable DLL exists on the computer, by first searching the registry, and then all the local hard disks for ssnetlib.dll, thus ensuring that the tool works:

- With the affected versions of both Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000.

- On the systems that have multiple instances of the vulnerable software installed on them, with potentially different patch levels.
· Locates the worm thread in the sqlserver.exe process and puts it to sleep.
· Displays a message prompting you to make sure that the Microsoft patch is installed. The patch is available from Microsoft Security Bulletin MS02-061. (If you have no service pack installed for Microsoft SQL Server 2000 or Microsoft Desktop Engine 2000, the vulnerable version of ssnetlib.dll is 8.00.194. If you have Service Pack 1 for the affected products installed, the vulnerable version of the DLL is 8.00.382.

What's new:

· Slight modification to text when reporting a possible vulnerable system.