Network Associates Virus Information Library: W32/Sasser.worm
Characteristics and removal instructions for the self-executing worm that spreads with the file name avserve.exe by exploiting a Microsoft Windows vulnerability.
vil.nai.com/vil/content/v_125007.htm
Symantec Security Response: W32.Sasser.Worm
Details on the worm that spreads by scanning randomly-chosen IP addresses for vulnerable systems.
securityresponse.symantec.com/avcenter/venc/data/w32.sasser.worm.html