Mysteryware Alert – AVSERVE.EXE

Avserve.exe is part of the W32/Sasser.worm. This worm is self-extracting and stealth installing. That means that you don't have to initiate any action in order to be infected. This worm does not spread via email but takes advantage of a security hole in Windows. Microsoft recommends fixing this by downloading a critical update patch. More info and a link to the download can be found at http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx.

We'd recommend removing this file using WinPatrol then scanning your system with an up-to-date antivirus program. More background info on this worm can be found at http://msn.mcafee.com/virusInfo/default.asp?id=description&virus;_k=125007. and

Microsoft: What You Should Know About the Sasser Worm

McAfee offers a tool to remove this virus. So if you're already infected, consider downloading and running it: http://vil.nai.com/vil/stinger/.

  • Worm
  • Remove