sasser and nachi help

  • Thread starter Thread starter Norvin
  • Start date Start date
N

Norvin

I have been running Norton on my new computer and been having some
strange problems so I installed AVG and the first time it ran it picked
up 150+ files infected with sasser/nachi worms. It did the cleanup
rountine but was unable to take care of three files:
C:\windows\avserve2.exe (sasser.B),
C:\windows\system32\drivers\SVChost.exe (NACHI.B worm) and
c:\windows\lsasss.exe (sasser.E worm). I downloaded/applied the MS patch
MS04-011 but not sure what to use to fix these files. Any help or
suggestions will be greatly appreciated by both me and the wife.
Thanks
Norvin
PS, this doesn't say much for Norton, and it was updated to most recent.
 
Norvin said:
I have been running Norton on my new computer and been having some
strange problems so I installed AVG and the first time it ran it picked
up 150+ files infected with sasser/nachi worms. It did the cleanup
rountine but was unable to take care of three files:
C:\windows\avserve2.exe (sasser.B),
C:\windows\system32\drivers\SVChost.exe (NACHI.B worm) and
c:\windows\lsasss.exe (sasser.E worm). I downloaded/applied the MS patch
MS04-011 but not sure what to use to fix these files. Any help or
suggestions will be greatly appreciated by both me and the wife.
Thanks
Norvin
PS, this doesn't say much for Norton, and it was updated to most recent.

See if one of these will work.
Click to expand...
Free online virus scan programs,

RAV
http://www.ravantivirus.com/scan/

Panda:
http://www.pandasoftware.com/activescan/

BitDefender
http://www.bitdefender.com/scan/license.php

Then report back here and let us know what
you found.
Good Luck,
Tom
 
Norvin said:
I have been running Norton on my new computer and been having some
strange problems so I installed AVG and the first time it ran it
picked up 150+ files infected with sasser/nachi worms. It did the
cleanup rountine but was unable to take care of three files:
C:\windows\avserve2.exe (sasser.B),
C:\windows\system32\drivers\SVChost.exe (NACHI.B worm) and
c:\windows\lsasss.exe (sasser.E worm). I downloaded/applied the MS
patch MS04-011 but not sure what to use to fix these files. Any help
or suggestions will be greatly appreciated by both me and the wife.
Thanks
Norvin
PS, this doesn't say much for Norton, and it was updated to most
recent.
Click to expand...

For Sasser B and E use this:

http://securityresponse.symantec.com/avcenter/FxSasser.exe

For Nachi use this: http://www.symantec.com/avcenter/FixWelch.exe

Note: The Nachi worm is known to Symantec as "Welchia". That removal tool
will still remove the virus.
 
Tom, thanks for the suggestion. Prior to reading your email I tried using AVG
again, twice in fact, and after the second effort, the files were cleaned and
as of this morning I am still clean. Chalk one up for AVG.
Norvin
 
Back
Top