Re: csecure.exe virus???
From: 916msmith (916msmith_at_nospam.postalias)
Date: 08/30/05
- Previous message: David H. Lipman: "Re: csecure.exe virus???"
- In reply to: David H. Lipman: "Re: csecure.exe virus???"
- Next in thread: David H. Lipman: "Re: csecure.exe virus???"
- Reply: David H. Lipman: "Re: csecure.exe virus???"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 30 Aug 2005 13:46:10 -0700
We are manually cleaning it now. Killing the process, deleting the file,
removing registry entries. So far it has only infected Win2k systems. We
seem to have a handle on it unless there is something we don't see going on
in the background.
We have been working on scripting a fix that will remove the virus and
install the MS patches, but its taking some time to get all that worked out.
I'm sure that our AV vendor will have a pattern in the near future to
prevent future infection and our IDS systems are letting me know what systems
are trying to spread the worm.
Thanks for everyones hints and tips. I'll post when I hear back from any of
the AV companies or when the TotalVirus report shows something different.
Mike Smith
"David H. Lipman" wrote:
> From: "916msmith" <916msmith@nospam.postalias>
>
> You said you also distributed this to "...the big names..." Thank You !!!
>
> Do you need instructions on downloading and using a Kasperski ( since this was detected by
> KAV as a RBot variant ) based "On Demand" AV scanner ?
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>
- Previous message: David H. Lipman: "Re: csecure.exe virus???"
- In reply to: David H. Lipman: "Re: csecure.exe virus???"
- Next in thread: David H. Lipman: "Re: csecure.exe virus???"
- Reply: David H. Lipman: "Re: csecure.exe virus???"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]