W32.Sasser-A - How To Remove?

Type: Worm

W32/Sasser-A is a network worm which spreads while using the Microsoft LSASS weak spot. Microsoft has made available a patch which protects against this weak spot and from Microsoft Security Bulletin MS04-011 it can be downloaded. The worm copies itself with the file name avserve.exe in the Windows folder and provides a registration key, so that it starts with the user registration.

Automatic W32.Sasser-A removal tools

Note: Reimage trial provides detection of parasites and assists in their removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.  We might be affiliated with some of these programs. Full information is available in disclosure

Manual removal


Important Note: Although it is possible to manually remove W32.Sasser-A, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Reimage or other tools found on 2-viruses.com.


About the author

I am an attentive virus researcher. My interests include discussions about deceptive online content and rogue software applications. All of our goal is to minimize the risks that many people encounter during browsing and help them figure out the main hints that might indicate that a program or a website is of a fraudulent nature.

April 18, 2007 14:03, April 18, 2007 14:03

Leave a Reply

Your email address will not be published. Required fields are marked *