Sophos

Online support

Product maintenance

Contact support

Support services

  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Sasser Removal ToolFree Sasser detection and removal

W32/Sasser-A, W32/Sasser-B, W32/Sasser-D and W32/Sasser-E can be removed from Windows 95/98/Me and Windows NT/2000/XP/2003 computers automatically with the following removal tool.

Note: When removing variants not listed above, use the removal instructions in the appropriate virus analysis.

Download Sasser Removal Tool

If you are removing Sasser from several computers, download the removal tool, save it to floppy disk and run it from there.

Command line removal tool

SASSSFX.EXE is a self-extracting archive containing SASSCLI, a command line removal tool for use by system administrators on Windows networks. Read the notes enclosed in the self-extractor for details on running this program.

After removing the worm

After removing the worm you should install the Microsoft patch MS04-011 or, on single computers, update with all relevant security patches from Windows update.

Note: Microsoft has documented several known issues with the MS04-011 update in Microsoft Knowledge Base Article 835732. Read this article carefully before applying the update. If any of the described problems occur after applying the update, please contact Microsoft support.

Other platforms

To remove W32/Sasser-A, W32/Sasser-B, W32/Sasser-D and W32/Sasser-E on other platforms please follow the instructions for removing worms.