Sasser is an Internet worm spreading through the MS04-011 (LSASS) vulnerability.
Sign of infection is the existence of a file named C:win.log and frequent crashes of LSASS.EXE. Sasser generates traffic on TCP ports 445, 5554 and 9996.
This disinfection tool can find and remove all known Sasser variants.
