Re: New Virus?

From: Sandy Mann (sandymann2_at_mailinator.com)
Date: 07/06/05 

Date: Wed, 6 Jul 2005 21:52:19 +0100

David,

Is that McAfee any version, or just McAfee Professional?

May I take this opportunity to thank you for going to so much trouble. 

--
Sandy
sandymann@mailinator.com
Replace@mailinator with @tiscali.co.uk
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:eo$VLNmgFHA.2852@TK2MSFTNGP15.phx.gbl...
> From: "Eugene Taylor" <ewtaylor2001@fake.com>
>
> UPDATED INFO:
>
> My contact at Trend Micro has identified rnaapp2.exe as being
"BKDR_GSPOT.E"
>
> McAfee/AVERT identified the two; noadsense.exe as "W32/Sdbot.worm.gen.by"
and
> rnaapp2.exe as "Generic BackDoor.bc".
>
> Both Trend and Mcafee will have signatures released in their next updates.
>
> The following can be used to create an EXTRA.DAT file for McAfee.
> Copy the data between the dashes ("---------------") but not including
them and
> paste the below into a file called EXTRA.DAT.
> Using the find/search utility on your computer search for the following
file:
> SCAN.DAT
> Then copy the EXTRA.DAT to the same folder where SCAN.DAT was found.
>
> EXTRA.DAT
> ---------------
>
>  256 178 156 179  77  51 218 128  63  28 222 215 111  92 249 157
>  122  92 255 222  49 150 138  37 104 127 130 188   2 105  40 182
>   65  60 130 188  87 150 132 168   2  60 130 188  35  72 133 187
>  121 204 140 199 189  49 141 163 232  35 230  15  86 147  65  95
>  143 186 132  33  24  79 247 201  90 122 128  49   6  53 234 214
>   99  29 239 202  13  51 140 179  25 204 140 222  67 204  22  19
>  148 164 141 179  12 164 141 179  13 127 140 179  20  51 154 179
>   94  92 235 199 122  82 255 214  81 126 228 208 127  92 254 220
>  107  71 209 252  65 118 141 247  13  51 141 179  78  99 141 218
>   13  76 140 179  12  22  12 204  14  51 140 150 140  76 143 179
>   12  22  12 204   9  51 140 150 140  76 143 179 140  76 140 179
>  140  76 141 179 140  76 142 179  12  22  12 204  13  51 140 150
>  140  76 136 179  12  22  12 204  15  51 140 150 140  76 143 179
>   12  20  12 204  12  51 140 150 140  76 141 179 140  76 140 179
>  140  76 141 179   6  50 141 179 141   4 141 179  17  63 141 193
>    5  51 141 179  13  47 141 179 127 178 242 126  15  52 141 253
>   10
> 16162 256   13045  515  W32/Sdbot.worm
>
>   97 178 155 178  77  51 202 214  99  86 255 218 110  19 207 210
>  110  88 201 220  98  65 163 209 110  15  40 180 155  86 193 188
>    2  60 215  22   8 127 130 188   2 105  40 186  22  60 130 188
>    2  29 246 187   5  71 114 178 121 131 143 179  29 214 157 218
>  231 219  37  86  47 112 133 174  34  71  53 222 188 248 254 190
>  143  54 141 179  13  50 141 167 242  50 224 253 192  49 138 179
>   67  52
> 7381 256   13045  515  Generic BackDoor.bc
>
> ---------------
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

Relevant Pages

  • Re: New Virus?
    ... > My contact at Trend Micro has identified rnaapp2.exe as being ... > Both Trend and Mcafee will have signatures released in their next updates. ... I ended up using Grisoft AVG, and TrendMicro Sysclean I have both of these ... I saw that they had come from the roaming profiles, ...
    (microsoft.public.security.virus)
  • Re: McAfee & Trend Micro Crashing
    ... Second response to your question: found, downloaded, and executed the removal ... Al Charbonneau wrote: ... The McAfee subscription was in force. ... Products Removal Tool *before* you installed the Trend Micro application? ...
    (microsoft.public.windowsxp.general)
  • Re: McAfee & Trend Micro Crashing
    ... Always state your full Windows version when posting in a forum or newsgroup. ... Did you uninstall the McAfee application and then run the McAfee Consumer Products Removal Tool *before* you installed the Trend Micro application? ...
    (microsoft.public.windowsxp.general)
  • RE:"unable to use windos update......" 22/6/2004
    ... corrupted so I ran the on site checkers from Symantec, ... Trend Micro and McAfee. ... Trend Micro found DOS.ARGOBOT.GEN which was simply deleted. ...
    (microsoft.public.scripting.virus.discussion)
  • Re: McAfee & Trend Micro Crashing
    ... The McAfee subscription was in force. ... Did you uninstall the McAfee application and then run the McAfee Consumer ... Products Removal Tool *before* you installed the Trend Micro application? ... Al Charbonneau wrote: ...
    (microsoft.public.windowsxp.general)