To use the Microsoft Sasser (A-F) Worm Removal Tool, you run the standalone program to scan your computer, which automatically terminates the worm’s process and deletes its malicious files.
The original, dedicated Sasser removal tool was released by Microsoft in May 2004 following the global outbreak of the Win32/Sasser worm. This dedicated tool has since been integrated into the standard Windows Malicious Software Removal Tool (MSRT). Step 1: Install the Critical Security Patch
The Sasser worm spreads automatically by exploiting a vulnerability in the Windows Local Security Authority Subsystem Service (LSASS). If you do not patch this vulnerability first, your computer can be instantly reinfected the moment you connect to the internet. Disconnect your internet cable or turn off Wi-Fi.
Download and install the Microsoft Security Update MS04-011 (specifically update KB835732 or later for legacy systems).
Turn on your Windows Firewall to block incoming malicious traffic. Step 2: Launch the Microsoft Removal Tool
You can launch the integrated removal utility directly from your Windows operating system:
Press the Windows Key + R on your keyboard to open the Run dialog box. Type mrt into the box and press Enter.
Click Yes if a User Account Control (UAC) window asks for administrator permission. Step 3: Run the Infection Scan
Once the MSRT interface opens, proceed with the following steps to clean your drive:
Leave a Reply