Author Topic: Win32:Sasser-B [Wrm]...C:\WINDOWS\avserve2.exe  (Read 3856 times)

0 Members and 1 Guest are viewing this topic.

fred1479

  • Guest
Win32:Sasser-B [Wrm]...C:\WINDOWS\avserve2.exe
« on: May 02, 2004, 12:04:26 AM »
Hello !

I've been infected by the bloody sasserB worm and I dont know how remove the

C:\WINDOWS\avserve2.exe

file of my computer ! It doesn't really exist !!!

Any solutions ??
Thanx

Jay

  • Guest
Re:Win32:Sasser-B [Wrm]...C:\WINDOWS\avserve2.exe
« Reply #1 on: May 02, 2004, 12:59:27 AM »
Manual disinfection of Sasser worm :
- first apply the Microsoft patch MS04-011
- kill "avserve.exe" or "avserve2.exe" process with Task Manager
- delete C:\WINDOWS\avserve.exe and/or C:\WINDOWS\avserve2.exe
- run regedit.exe and go to {SOFTWARE\Microsoft\Windows\CurrentVersion\Run}
  and delete key(s) with avserve.exe and/or avserve2.exe
- then reboot your system

That's all  ;D

fred1479

  • Guest
Re:Win32:Sasser-B [Wrm]...C:\WINDOWS\avserve2.exe
« Reply #2 on: May 02, 2004, 01:43:02 AM »
Thanx a lot !

the problem seem to be over on my computer. I've downloaded critical things from windows update. I 've switch off then on the machine and avast! says nothing anymore. No alarm... and The machine goes faster now...

I pray, it's really over  !
 ;D