New Worm Exploits Sasser Flaw

A new Internet worm is spreading by exploiting a flaw in the Sasser worm, according to an alert issued this week.

The new worm is tentatively named Dabber. It takes advantage of a vulnerability in an FTP server component in the Sasser worm and may have infected thousands of computers infected with Sasser. Dabber is believed to be the first worm that spreads specifically by targeting a flaw in another worm's code, according to an advisory published by LURHQ, a Chicago-managed security services company.

The worm uses code written to exploit the FTP flaw and was recently released on the Internet. It scans the Internet on port 5554 for computers running Microsoft's Windows operating system and infected with Sasser, LURHQ says.

When it finds vulnerable hosts, it connects to the victim and uses a built-in FTP server to transfer the worm file, named "package.exe," to the system. When run, the Dabber worm installs itself on Windows, shuts down the Sasser worm and other worm processes, then prevents them from running again. Dabber also opens TCP port 9898 as a backdoor, which can be used by a remote attacker to download other code or communicate with the infected host, LURHQ says.

Dabber does not appear to be spreading quickly, but the number of infections is escalating, LURHQ says.



Sasser appeared on May 1, and exploits a recently disclosed hole in a Windows component called the Local Security Authority Subsystem Service, or LSASS. Microsoft released a software patch, MS04-011, on April 13.

Dabber is similar to Sasser and earlier worms like Blaster because users do not need to receive an e-mail message or open a file to be infected. Instead, just having a Sasser-infected Windows machine connected to the Internet is enough to catch Dabber.

Last week, Microsoft acknowledged that more than 1.5 million copies of a Sasser cleanup tool were downloaded from its Web site within the first 48 hours after it was offered.

LURHQ has posted instructions for shutting down and removing Dabber.

Pentium D is only 24%

Currently there are three known Pentium E1000, E1060 respectively, E1040. E1020, 1.8GHz,1.6GHz,1.4GHz frequency, 800MHz front bus. 2 1MB cache, similar to the current Pentium 4 Presler core. Celeron D series of specific numbers yet clear, but will shrink to the 533MHz front bus. Only 2 Cache 512 KB full with the current core Celeron D Cedar Mill similar. But that move often take. To the second quarter of next year, Intel will have shipped 50% of all desktop processor Core 2 Duo. Pentium D is only 24%, but 16% of Pentium 4 and Celeron D together.

Conroe and the return of two series : the Pentium Saillant

Pentium Pentium, We are ready to work with Celeron Saillant -- on the two departed from the classic brand, Intel has decided to let the two continue to effect. 2007 second quarter, Intel will launch a single processor core Conroe-L. E1000; named Pentium third quarter Conroe-L extended another more low-end single-core series, named Celeron 400. Now they will replace the Pentium 4 and Celeron D, to be the last single-core Intel processors.

Six New Intel Pentium 4 models completely transparent nuclear

Today, a more comprehensive foreign websites Intel four core processor information on the server. Intel plans to launch Pentium ? 5300 and 3300 series of two, Based on core Kentsfield former, the latter is based on the core Clovertown. From the standard, Pentium 3300 series and Core 2 Mist series, on the same core, and interface has not changed. In the first quarter of 2007, Intel will release two Xeon 3300 series products, the specifications are as follows : In Kentsfield core Pentium, Intel will release Clovertown core Xeon DP processor, its use LGA771 interface, including X5355, E5345. E5320 and E5310 four specifications Please see table below : Finally, in the first quarter of 2007. Tulsa will also release the new Intel Xeon processor MP, This new Xeon MP nuclear-7150N will reach 3.5GHz frequency. support 667MHz FSB, 2MB L2 cache and 16 MB L3 cache with. 1,000 were sold at 2,622 U.S. dollars.

Single nuclear SuperPI 1M results

Test Platform : MB : WS Pro P5W64 ES : E6600 CPU B1 Ram : Crucial DDR2 667 D9 Fat ,21 Zippy 850W Power : Matrox G450 PCI VGA : Tower 120 Cooler : Mainboard BIOS can set up a core switch off Two nuclear SuperPI 1M results Single nuclear achievements SuperPI 32M Binuclear results SuperPI 32M The test results demonstrated that the gap between the results of the Dual core SuperPI minimal. But turn off for a core-frequency will help. It can be predicted that by virtue of the excellent framework Rui cool, Single-nuclear future Pentium and Celeron series E are worth looking products.

Is worth the wait! Measured single nuclear Conroe Performance Simulation

Recently, the news of the many single nuclear Conroe, according to the current situation, the second quarter of 2007. Intel will launch a single processor core Conroe-L named Pentium E1000; Third quarter, more low-end single-core Conroe-L extension of another series, named Celeron 400. Now they will replace the Pentium 4 and Celeron D, to be the last single-core Intel processors. Now Intel is the future market position and product specifications on all fronts.Many readers want to know how the performance of single nuclear Conroe-L. Today, Taiwan Coolaler forums friends do an interesting test If a core switch off Conroe, probably not on the strength of a series of simulated future Pentium E. Mody.

Intel rebellious mood, This is definitely not a small chance for AMD

AMD naturally hope to be able to share them. With Opteron processor's outstanding performance, AMD has won a lot of servers / workstation market share, but still is still a piece of notebook PC and its weaknesses. AMD unremitting efforts in this respect in recent years, hoping to achieve something of note. On the current situation, many PC manufacturers have come to Intel rebellious mood, This is definitely not a small chance for AMD.