W32.SQLExp.Worm - Removal

Risk Level 2: Low

Download Removal Tool | Printer Friendly Page

Discovered: January 24, 2003

Updated: February 13, 2007 11:42:35 AM

Also Known As: SQL Slammer Worm [ISS], DDOS.SQLP1434.A [Trend], W32/SQLSlammer [McAfee], Slammer [F-Secure], Sapphire [eEye], W32/SQLSlam-A [Sophos]

Type: Worm

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP

CVE References: CAN-2002-0649

Removal Tool
Symantec has provided a tool to remove the infections of W32.SQLexp.Worm. Click here to obtain the tool. Try this tool first, as it is the easiest way to remove this threat. Because the worm resides in memory only and is not written to disk, the virus definitions do not detect this threat. Customers are recommended to follow the measures described in this document to control with this threat.

Writeup By: Douglas Knowles

Technical Details

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}