Targeted removal of the W32.Serflog.A or the W32.Serflog.C virus. These are worms that spread through file-sharing networks and MSN Messenger. These worms also lowers security settings.
If you are on a network or have a full-time connection to the Internet, such as a DSL or cable modem, disconnect the computer from the network and Internet. Disable or password-protect file sharing, or set the shared files to Read Only, before reconnecting the computers to the network or to the Internet. Because this worm spreads by using shared folders on networked computers, to ensure that the worm does not re-infect the computer after it has been removed, Symantec suggests sharing with Read Only access or by using password Protection.
For instructions on how to do this, refer to your Windows documentation, or the document, "How to configure shared Windows folders for maximum network protection."
If you are removing an Infection from a network, first make sure that all the shares are disabled or set to Read Only.
This Tool is not designed to run on Novell NetWare servers. To remove this threat from a NetWare server, first make sure that you have the current virus definitions, and then run a full system scan with the Symantec antivirus product.
