Full Disclosure mailing list archives

Re: removing sasser

From: Marcel Krause <marcel_k () web de>
Date: Thu, 13 May 2004 01:58:53 +0200

Hi Alerta!

2. Look for avserve.exe or avserve2.exe in the %Windir% directory
3. Delete "avserve.exe" [...] in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


thx, thats the info I was looking for

Yours, Marcel

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

removing sasser Marcel Krause (May 11)
- Re: removing sasser Ondrej Krajicek (May 12)
- <Possible follow-ups>
- Re: removing sasser Tom Koehler (May 11)
- Re: removing sasser Doc Nielsen (May 12)
- Re: removing sasser Marcel Krause (May 12)