---
title: Removing Sasser Worm
date: 2004-05-04 22:42:22
permalink: https://lesterchan.net/blog/2004/05/04/removing-sasser-worm/
author: Lester Chan
excerpt: "First, to stop your computer restarting automatically, go to Run and type shutdown -a. Then download the patch from Microsoft, for Windows XP or Windows 2000/2003, install it, and download the removal tool to clear the Sasser worm."
categories:
  - Software
---

First, to make sure you computer don’t get restarted automatically, go to Run, then type ” shutdown -a” without the quotes. This will prevent it from restarting automatically.

Download the patch from Microsoft site. Here are the links: Windows XP or Windows 2000/2003.

Install the patch, then download Symantec’s Sasser Removal Tool.

The tool will:

> 1\. Terminates the W32.Sasser viral processes.  
> 2\. Deletes the W32.Sasser files.  
> 3\. Deletes the registry values that the worm adds.

Restart your computer in safe mode, run FxSasser.exe. After that boot up normally and run the tool again to ensure that the virus is totally gone.

Note: I did not tried the above steps because I do not have an infected PC to try on. But based on logic and common sense, it should work.