How to delete Win32.Worm.Sasser.{A-C}

[DEWITT]

I have bought a new personal computer; it was working fine until I have start using Internet. The internet was working fine for more than two weeks and after that my personal computer got hanged; whenever I try to do something it gets hanged. Then I scanned my personal computer with the online virus scan and displayed me a message that “Win32.Worm.Sasser.{A-C} found”. I have no idea how to remove this virus from my personal computer. Can anybody help me with this problem?

[Steve123]

Win32.Worm.Sasser.{A-C} virus which is detected on your personal computer was known to world on 2004 May 01, the damage it will do to your personal computer is of medium level. But any kind of damage to your personal computer will not be good for you since it annoys you while you are working so download removal tool from the internet and remove Win32.Worm.Sasser.{A-C} virus from your personal computer.

[Shen]

I am also facing the similar problem of Win32.Worm.Sasser.{A-C} virus then I tried to find the information regarding this virus. Even if threat from this virus is of medium level but then also you must not have Win32.Worm.Sasser.{A-C} virus on your personal computer. If you are infected with Win32.Worm.Sasser.{A-C} virus download avast antivirus software and get rid of the virus named as Win32.Worm.Sasser.{A-C}

[Big Fish]

If your personal computer is infected with Win32.Worm.Sasser.{A-C} then you will find the presence of the following file in your windows folder.
%WINDIR%\avserve.exe -- Win32.Worm.Sasser.A
%WINDIR%\avserve2.exe -- Win32.Worm.Sasser.B,C
And the following registry key can be seen in your registry window.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
So I will suggest you to delete those files and registry key.

[Zachary]

I have the technical details related to Win32.Worm.Sasser.{A-C} may this will be helpful in dealing with this virus problem. This worm installs itself by exploiting the LSASS vulnerability. Once this virus gets executed then it will drop the following files in windows folder.
%WINDIR%\avserve.exe -- Win32.Worm.Sasser.A
%WINDIR%\avserve2.exe -- Win32.Worm.Sasser.B,C.
And creates the registry key in the registry window to hide itself from antivirus software.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
with the value:"avserve.exe" = "%WINDIR%\avserve.exe" -- Win32.Worm.Sasser.A
"avserve2.exe" = "%WINDIR%\avserve2.exe" -- Win32.Worm.Sasser.B,C

So I will suggest you to delete those file and remove registry values.

[Snake08]

Update your antivirus software and install all the security patches. Update all windows and all software you are using. After that download BitDefender on your personal computer. Do not forget to download the latest version of BitDefender and scan your system, and let the BitDefender to find all the virus and worms on your system and delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
from your system.