Sasser Worm and its variants Eliminated by OnDemand Softwares WinINSTALL 8

OnDemand Software, the WinINSTALL Company, today announced that its WinINSTALL 8 Desktop Management System is helping a number of companies rapidly respond to the spreading Sasser worm virus. Small, Medium and Enterprise companies worldwide have recently used WinINSTALL to protect their computers against the Sasser worm.

(PRWEB) May 6, 2004 -- OnDemand Software, the WinINSTALL Company, today announced that its WinINSTALL 8 Desktop Management System is helping a number of companies rapidly respond to the spreading Sasser worm virus. Small, Medium and Enterprise companies worldwide have recently used WinINSTALL to protect their computers against the Sasser worm.

Microsoft teams have confirmed that the Sasser worm (W32.Sasser.A and its variants) is currently circulating on the Internet. Microsoft has verified that the worm exploits the Local Security Authority Subsystem Service (LSASS) issue that was addressed by the security update released on April 13 in conjunction with Microsoft Security Bulletin MS04-011.

The worm begins by targeting Microsoft Windows 2000 and XP workstations that have not been properly patched for the LSASS vulnerability. Once the worm infects such a system, it continues propagating by scanning random IP addresses for vulnerable systems. When one is found, the worm exploits the system by executing a script instructing the target victim to download and execute the worm from the infected host. The nature of this vulnerability allows Sasser to execute without requiring any action on the part of the user.

The amazing speed with which the vulnerability was exploited is a sign that companies are going to have to respond to new threats even faster than they are today", said Jack Palmer, CEO at OnDemand Software, Inc. Palmer added Companies using WinINSTALL have been able to shrink the time it takes them to test and deploy patches to computing environments of 10 to 50,000 computers. This use of WinINSTALL speaks directly to the need to truly manage the lifecycle of desktops rather than concentrating on short-sighted packaging only solutions."

It is absolutely imperative that administrators scan their PC based networks and identify vulnerable machines and take corrective actions," said Paul Pieske, Vice-President at OnDemand Software. WinINSTALL is and has been used as a Patch Management system for many years. WinINSTALL can make virtually any change to a machine whether it is a desktop or server. A package can be created to patch any system with WinINSTALL."

How WinINSTALL 8 helps eliminate the Sasser Worm

For over 10 years, OnDemands WinINSTALL customers have quickly deployed hot fixes and updates, eliminating downtime associated with application and network failures, allowing a low cost of ownership and continued productivity. A package can be created to patch any system with WinINSTALL, both in MSI as well as NAI (native WinINSTALL file format). WinINSTALL includes vulnerability assessment functionality.

Many viruses and worms today are beginning to register themselves in ways that disguise a machine as being patched when it very well may not have been. It is not enough to merely check a machines registry to determine whether a machine has been patched or not. To assure that a machine has been properly patched a check at the systems file level and file attribute level is necessary.

Today, WinINSTALL has the ability to perform prerequisite checking for operating system, service pack, application and file and file attribute level as well as hardware prerequisite checks to determine whether a package should be installed to a machine or not. So in essence you can look to see whether a machine or group of machines have had a particular patch applied and if not install that patch correctly.

WinINSTALL 8

Winner of nineteen industry awards, WinINSTALL is used by over 10,000 companies worldwide - including over 80% of Fortune 500 companies - and currently supports millions of corporate desktops. Through the foundation of a centralized database, WinINSTALL 8 provides a single source that holds all of the information about software packages, conflict assessment checks, inventory to the file level and the ability to relate that to machines in your network. WinINSTALL brings to the table an award winning MSI packager and patch management system, an advanced asset management system, combination push and pull distribution methodologies and advanced results reporting and notification. WinINSTALL automatically populates the console with Active Directory, NT domain groups, Netware NDS or any combination of these in mixed network environment.

If you would like to try WinINSTALL FREE for 30-days please go to www.ondemandsoftware.com or call OnDemand Software at 1-239-495-0541.

About OnDemand Software, Inc.

OnDemand is a pioneer and a leading provider of software distribution solutions, for small, medium and enterprise IT environments. OnDemands WinINSTALL product family, winner of 19 industry awards, is used to institute and maintain desktop standards, automating the installation of operating systems, content and application load sets to networked and remote PCs.

OnDemand customers -- small, medium and enterprise IT environments -- report a substantial return on investment (ROI) and a reduction in the total Cost of Ownership (TCO). OnDemand is committed to continuing the WinINSTALL product familys leadership role in the software distribution and change management market. Over 10,000 companies worldwide, supporting millions of desktops use the WinINSTALL product.

For more information on OnDemand, please

see www.ondemandsoftware.com or call Paul Pieske at 239/495-0541.