Published Jul 19, 2004|Updated Sep 15, 2017


Alert level: Severe Detected with Windows Defender Antivirus

Also detected as: W32/Sasser.worm.b (McAfee) W32.Sasser.B.Worm (Symantec) WORM_SASSER.B (Trend Micro) Win32.Sasser.B (CA) Sasser.B (F-secure) Sasser.B (Panda) W32/Sasser-B (Sophos) Worm.Win32.Sasser.15872.B (Global Hauri) W32/Sasser.B (Norman)

Win32/Sasser.B is a network worm that exploits the Local Security Authority Subsystem Service (LSASS) vulnerability fixed in Microsoft Security Update MS04-011. The worm targets Windows 2000 and Windows XP computers that do not have the MS04-011 security update installed. Infected computers attempt to spread the worm to other unprotected computers by randomly scanning IP addresses and infecting vulnerable computers.


Latest news