Sasser is an Internet worm spreading through the MS04-011 (LSASS) vulnerability.

Several variants of the Sasser worm / virus, spread via the Internet by attacking random internet IP addresses. These variants attempt to exploit the LSASS vulnerability. Here is the list of variants Sasser. A, Sasser. B, Sasser. C, Sasser. D, Sasser. E and Sasser. F.

This vulnerability is caused by a buffer overrun in the Local Security Authority Subsystem Service, and will affect all machines that are:

- Running Windows XP or Windows 2000
- Haven't been patched against this vulnerability
- Are connected to the Internet without a firewall

Follow these Steps to remove & patch your pc from the the sasser worm / Virus

Step 1, Remove sasser virus - Patch your computer
Fix SASSER Worm Sasser Virus

Step 2, Remove sasser virus -
Disable system restore

Step 3, Remove sasser virus -
Remove worm MSBLAST,SASSER Worm / Virus

Step 4, Remove sasser virus -
Re enable system restore

Manual Disinfection to remove the sasser virus

To manually remove the virus from an infected system, you must first apply the Microsoft patch MS04-011, then use Task Manager to kill the "avserve.exe" process, then delete the file AVSERVE.EXE from your Windows directory and reboot. For step-by-step instructions, see Microsoft's Sasser Fix site: http://www.microsoft.com/security/incident/sasser.mspx