Re: Virus or Hack?

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 11/14/03 

Date: Fri, 14 Nov 2003 15:31:53 -0500

Mitchell:

You may or may not have the Swen worm, something caused the change.

Go to the following URL and download the McAfee worm removal tool Stinger at
http://vil.nai.com/vil/stinger/
Execute this utility on the platform and it will find and remove the infector if found.

Then, please go to the following URL: http://vil.nai.com/vil/content/v_100662.htm
Towards the bottom of the page you will see "Removal Instructions"

In any case (Swen found or not), download FIXSWEN.INF
After you download the utility Right Click on the file and install it.
This will REPAIR executable file extension associations.

Dave

"Mitchell" <mboyer@mti.com> wrote in message news:020401c3aaeb$a0a3c630$a401280a@phx.gbl...
| I have a situation where a win2k server will not run
| executables (.exe). It seems to have associated them all
| with notepad. So no matter what I run, it opens up in
| Notepad. I can however change a .exe extension to a .com
| extension and run it that way but what a pain...
|
| My Virus scanner finds nothing... a friend told me it may
| be a "wedge".
|
| Does anyone have any suggestions?
|
| Thanks...
|
| ...Mitchell

Relevant Pages

  • RE: File extensions spoofable in MSIE download dialog
    ... notepad.exe (as a file with the usual ".log" extension would be) ... In no instance was I able to "silently" download and execute an executable ... These are the two browsers I tested with: ...
    (Bugtraq)
  • Is there a software program to search for files other than the XP
    ... I am looking for a download that will allow me to execute it easy/fast and ... put in a file name or extension to have it locate the fileright away ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: SP3 potential problem
    ... Enquire, plan and execute ... download the Net framework updates. ... Net Framework items from my machine. ...
    (microsoft.public.windowsxp.basics)
  • Re: Trojan Horse
    ... NewCrapNet is not classified as a virus, ... > Download and install Ad-aware SE ... > signature files and install them before performing the scan. ... > Execute; CLEAN.EXE ...
    (microsoft.public.windowsupdate)
  • Re: New Patch Fixes 43 Flaws In OS X, Many Serious
    ... Process *ids* aren't tied to user ids; ... Try it yourself; download a text file ... Evil code, and execute. ... have to hand-install the widgets, ...
    (comp.sys.mac.advocacy)