Re: Dig in: autorooter, maybe that IRC one but SAV doesnt pick it up.

From: Christine Kronberg (Christine_Kronberg_at_genua.de)
Date: 08/06/03

  • Next message: Schmehl, Paul L: "RE: Secure.dcom.exe"
    Date: Wed, 6 Aug 2003 18:06:55 +0200 (CEST)
    To: Drew Weaver <drew@orbityl.com>
    
    

    On Tue, 5 Aug 2003, Drew Weaver wrote:

    > Dig in.
    >
    > http://www.soul-fu.com/drew.zip
    >
    > I found this on a Windows 2k SP4 machine without (without) the two most
    > recent and critically nessicary patches.

      Nav finds a worm called W32/Lolol.worm.gen in juh.exe and dcomx.exe.
      It fits to what I saw when let the files run within a vmware.
      I'm not sure about the files in the cba directory. According to what
      I found with google there seems to be a link to NAV CE (at least to
      some antivirus software). Are you sure that they have not been there
      earlier?
      (I'm not a windows expert: what are *.lrc files? )

      Cheers,

                                                                   Chris.

    -- 
    GeNUA mbH
    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    

  • Next message: Schmehl, Paul L: "RE: Secure.dcom.exe"

    Relevant Pages

    • Re: Mounting a GPS - any thoughts?
      ... compact so fits in the pocket when I park the car up) ... I cant afford a bike sat nav as they are scary prices!! ... I'd like to fit my existing sat nav onto my bike (Honda CBX750 ... map pocket of the tankbag. ...
      (uk.rec.motorcycles)
    • Mounting a GPS - any thoughts?
      ... compact so fits in the pocket when I park the car up) ... I cant afford a bike sat nav as they are scary prices!! ... I'd like to fit my existing sat nav onto my bike (Honda CBX750 Bol ...
      (uk.rec.motorcycles)
    • Re: Mounting a GPS - any thoughts?
      ... I have a Garmin Nuvi 215 sat nav that I use in the car (nice ... and compact so fits in the pocket when I park the car up) ... like to fit my existing sat nav onto my bike ... transparent map pocket on top. ...
      (uk.rec.motorcycles)
    • Re: Worm.Automat.AHB Worm (also perhaps known as W32.Swen.A@mm
      ... > While NAV is catching the virus, ... Yet each time these emails come in, ... >>> the criteria of the worm, ... >>>>The fact that my systems are proof against infection by ...
      (microsoft.public.security.virus)
    • Re: Rant about Sweet Marias web server? (follow up)
      ... applied NAV still blocks any attempt for the 'ICC Profile TagData Overflow'. ... I went into NAV in the 'Internet Worm Protection' section and 'Configure ...
      (alt.coffee)