Re: Possible Trojan/Worm

From: DJ (doveman007_at_bigfoot.com)
Date: 05/04/05 

Date: 4 May 2005 06:13:45 -0700

Good news. It seems the problem's fixed, 'cos the owner reports that
Kerio's log is no longer reporting any attempts by winlogon.exe or
rundll32.exe trying to access the Net, so it looks like it was Look2Me
that was the source of this problem.

I'm curious about one thing. Something must have been loading the
Look2Me dlls at boot, so now that Mcafee's deleted them, shouldn't XP
produce an error that it can't find a file(s)?

I got him to do a Full Scan with Ad-aware anyway, and all it found were
42 MRU List Objects and 45 Tracking Cookies, which I'll check and
delete soon.

So, thanks for all your help. I was thinking we might have to reinstall
XP and all the apps which would be a major pain, so it's great that we
didn't have to.

Cheers

Quantcast