The sasser worm is quite recent. If Norton wasn't updated regularly, the virus signature files wouldn't have identified it.
Is Norton configured to automatically update on his system, and is the subscription up to date and current? If it's an old version that came 'bundled' with his system , for example, it may well be out of date, and quite useless.
Reputation Points: 229
Solved Threads: 149
Grandad
Offline 3,826 posts
since Mar 2004