Content Starts Here
Sasser Security threat
Have you been infected by Sasser?
Security threat
The Sasser worm is the latest major Internet worm, which is fast spreading by exploiting a Microsoft Windows security flaw. Unlike many other security threats it does not travel through emails or attachments but can instead automatically infect a computer without any user intervention. It then continues to replicate and send itself to other computers on the Internet using infected computers as a host.
Have you been infected?
Common symptoms which may indicate that your computer has been infected include:
Security threat
The Sasser worm is the latest major Internet worm, which is fast spreading by exploiting a Microsoft Windows security flaw. Unlike many other security threats it does not travel through emails or attachments but can instead automatically infect a computer without any user intervention. It then continues to replicate and send itself to other computers on the Internet using infected computers as a host.
Have you been infected?
Common symptoms which may indicate that your computer has been infected include:
- An error message indicating a problem with 'LSA
Shell' such as:
- System shutdown which may caused error
messages such as the following:
- Download the FxSasser.exe file by clicking HERE and selecting to save the file to a convenient location, such as your downloads folder or the Windows desktop. If you are prompted to accept a Security Certificate click on OK.
- Once you have saved the file disconnect from the Internet and close all running programs before running the tool.
- If you are running Windows Me or XP, then disable System Restore. Instructions for how to do this are available for Windows ME & Windows XP.
- If you are running Windows 98/Me, restart the computer in Safe mode by holding down the F8 key until a Start-up menu appears with the option to start in Safe Mode. This will now start your computer in Windows with minimal programs installed.
- Double-click the FxSasser.exe file to start the removal tool and click on 'Start' to begin the process, and then allow the tool to run.
- Once the tool has completed its scan restart your computer. If you are running Windows Me/XP, then re-enable System Restore as described for Windows ME HERE and Windows XP HERE.
- To help protect your computer against the Sasser worm and its variants, you can also download and install Microsoft security update 835732 which is available at http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx.
Virus list
Font size
Mail
My account
Help
Community
Print now
Send to a friend
Related articles
Related products
