sasser and nachi help

[Norvin]

I have been running Norton on my new computer and been having some
strange problems so I installed AVG and the first time it ran it picked
up 150+ files infected with sasser/nachi worms. It did the cleanup
rountine but was unable to take care of three files:
C:\windows\avserve2.exe (sasser.B),
C:\windows\system32\drivers\SVChost.exe (NACHI.B worm) and
c:\windows\lsasss.exe (sasser.E worm). I downloaded/applied the MS patch
MS04-011 but not sure what to use to fix these files. Any help or
suggestions will be greatly appreciated by both me and the wife.
Thanks
Norvin
PS, this doesn't say much for Norton, and it was updated to most recent.

 

[Tom R]

I have been running Norton on my new computer and been having some
strange problems so I installed AVG and the first time it ran it picked
up 150+ files infected with sasser/nachi worms. It did the cleanup
rountine but was unable to take care of three files:
C:\windows\avserve2.exe (sasser.B),
C:\windows\system32\drivers\SVChost.exe (NACHI.B worm) and
c:\windows\lsasss.exe (sasser.E worm). I downloaded/applied the MS patch
MS04-011 but not sure what to use to fix these files. Any help or
suggestions will be greatly appreciated by both me and the wife.
Thanks
Norvin
PS, this doesn't say much for Norton, and it was updated to most recent.

See if one of these will work.

Free online virus scan programs,

RAV
http://www.ravantivirus.com/scan/

Panda:
http://www.pandasoftware.com/activescan/

BitDefender
http://www.bitdefender.com/scan/license.php

Then report back here and let us know what
you found.
Good Luck,
Tom

 

[The Prophecy]

I have been running Norton on my new computer and been having some
strange problems so I installed AVG and the first time it ran it
picked up 150+ files infected with sasser/nachi worms. It did the
cleanup rountine but was unable to take care of three files:
C:\windows\avserve2.exe (sasser.B),
C:\windows\system32\drivers\SVChost.exe (NACHI.B worm) and
c:\windows\lsasss.exe (sasser.E worm). I downloaded/applied the MS
patch MS04-011 but not sure what to use to fix these files. Any help
or suggestions will be greatly appreciated by both me and the wife.
Thanks
Norvin
PS, this doesn't say much for Norton, and it was updated to most
recent.

For Sasser B and E use this:

http://securityresponse.symantec.com/avcenter/FxSasser.exe

For Nachi use this: http://www.symantec.com/avcenter/FixWelch.exe

Note: The Nachi worm is known to Symantec as "Welchia". That removal tool
will still remove the virus.

 

[Norvin]

Tom, thanks for the suggestion. Prior to reading your email I tried using AVG
again, twice in fact, and after the second effort, the files were cleaned and
as of this morning I am still clean. Chalk one up for AVG.
Norvin