IEA Software, Inc.

IEA Software Knowledge Base - ID:55367

IEA Knowledge base

Emerald (KB ID: 55367)

Dec 27 2004

After installing SQL 2000 the server has begun flooding our network with traffic and the SQL server process is using a very high amount of processor time. What might be happening? Do I have a virus?

Dec 27 2004

The problem may very well be the server has been infected with the SQL server Slammer or Sapphire worm.

When installing SQL 2000 you must install the latest SQL service pack avaliable from Microsoft *before* making the server avaliable from the Internet. Failing to do this will very likely lead to your server being compromised in just a matter of minutes after being exposed to the Internet!

More information on the worm and steps necessary for removal can be found at the following URLs:

http://www.cert.org/advisories/CA-2003-04.html
http://www.microsoft.com/technet/security/virus/alerts/slammer.asp