Sql Snake Or Similiar WORM
Jun 24, 2006is there any worms specific to 1433 that are taking out servers right now?
View 6 Repliesis there any worms specific to 1433 that are taking out servers right now?
View 6 RepliesI am a ColdFusion developer who has been self taught in MS SQL. Something I am trying to do that should be very easy is killing me. I can do this in a couple different calls to the DB but feel I should be able to do it in one. Here is what I have/want...
I have in my DB a field that contains a comma sep. list. I am sending to a page url.id. That ID contains one number that I want to find in that field.
I can NOT use LIKE bc field might be...
1,2,3,4
1,2,3,11,12
URL.ID might be 1 so with LIKE it would find the 1 and 11 etc
I have tried...
CONTAINS (Field, 'URL.ID') Which would work but CONTAINS ignores numbers from what I am reading (and the error message says this).
Any help greatly appreciated. I just need someone to help me with this Where Clause.
Thanks again Chris
worm attack on SQL Servers 1434 port.
Read the links below.
http://www.cert.org/advisories/CA-2003-04.html
:rolleyes:
Hi all.
My SQL Server 2000 SP4 installation running on Windows 2003 server (SP1, all patches current) has been infected TWICE by something that Sophos can't detect.
The symptoms are that an account called SQLsys is created on the machine and is made an administrator.
A service called "ApptoService spoolsrv" is created. An executable called syss.exe is also created in a few places. After infection the machine immediately starts attacking other computers on the network.
I had Windows Firewall running, with ports open for SQL server and Remote Desktop.
I ran the MBSA, it didn't find anything open.
I even ran the beta MS web tool for scanning, didn't detect any trojans.
I'm going to be restoring the machine (AGAIN), but I wish I knew what security hole is being found! Any ideas?
Hi all,
I have a case of sqlslammer.worm virus on my DB server. I have run Mcafee antivirus software but the virus cannot be removed.
Please can anyone tell me how to getit off my server?
Leonard