Trojan svchost.exe in created folder windows/syst32 caught by Norton

From: Puzzld (longtemps@softhome.net)
Date: 11/28/02 

From: longtemps@softhome.net (Puzzld)
Date: 27 Nov 2002 18:20:40 -0800

Has anyone else seen this?

Norton firewall caught a trojan trying to send out info over internet.
 It was called svchost.exe, 18.8 KB (as opposed to 12.5 for the valid
WinXP file), resided in a newly created folder called windows/syst32,
and had a registry key called "LTM2" to run it at startup. The
program itself had a capital letter "A" as its icon.

I don't know what it was trying to send, but apparently to the
following address: 221.6.2.1,ircu-2(6667). It has been terminated and
quarantined on my system.

Thanks.

Relevant Pages

  • Re: Cant find message
    ... all the stuff about the TIF folder, and "being a shell folder with its own ... > Temporary Internet Files folders are Special Folders, like My Documents, ... They are hidden from Windows Explorer and Search. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Publishing folders on companyweb
    ... However I thought about makeing the document library some kind of virtual folder which would be redirected to folder on another disk. ... we can make the documents accessible from Internet. ... Click one document library name in the Document Libraries list ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Publishing folders on companyweb
    ... library some kind of virtual folder which would be redirected to folder on ... we can make the documents accessible from Internet. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant find message
    ... > all the stuff about the TIF folder, and "being a shell folder with its own ... >> Temporary Internet Files folders are Special Folders, like My Documents, ... They are hidden from Windows Explorer and Search. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Cant find message
    ... Temporary Internet Files folder is a Virtual Folder and a Namespace object. ... They are hidden from Windows Explorer and Search. ...
    (microsoft.public.windowsxp.help_and_support)