w32\sasser.worm.a

[Guest]

With Mcaffee I deleted the sasser infected files "windows\avserve.exe" and "windows\system32\25259-up.exe". Can I just reload those files from the Windows XP CD?

 

[Richard Goh]

You do not want to "reload" those files. They are files created and added
by the worm. Windows does not want those files on the computer!

With Mcaffee I deleted the sasser infected files "windows\avserve.exe"

and "windows\system32\25259-up.exe". Can I just reload those files from the
Windows XP CD?

 

[roger]

Hi derek,

With Mcaffee I deleted the sasser infected files "windows\avserve.exe" and "windows\system32\25259-up.exe". Can I just reload those files from the Windows XP CD?

No!!
Those files _are_the worm.

HTH

 

[Guest]

Thanks guys!

 

[roger]

You're welcome, Derek
Glad to help.

 

[Bruce Chambers]

Greetings --

No, you won't find the worm's files on the WinXP installation CD.
Why do you want it back, anyway? If you wanted your PC to remain
infected, wouldn't it have been simpler not to have removed it?

Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH