Re: csecure.exe virus???

From: 916msmith (916msmith_at_nospam.postalias)
Date: 08/30/05

  • Next message: David H. Lipman: "Re: csecure.exe virus???"
    Date: Tue, 30 Aug 2005 13:46:10 -0700
    
    

    We are manually cleaning it now. Killing the process, deleting the file,
    removing registry entries. So far it has only infected Win2k systems. We
    seem to have a handle on it unless there is something we don't see going on
    in the background.

    We have been working on scripting a fix that will remove the virus and
    install the MS patches, but its taking some time to get all that worked out.
     I'm sure that our AV vendor will have a pattern in the near future to
    prevent future infection and our IDS systems are letting me know what systems
    are trying to spread the worm.

    Thanks for everyones hints and tips. I'll post when I hear back from any of
    the AV companies or when the TotalVirus report shows something different.

    Mike Smith

    "David H. Lipman" wrote:

    > From: "916msmith" <916msmith@nospam.postalias>
    >
    > You said you also distributed this to "...the big names..." Thank You !!!
    >
    > Do you need instructions on downloading and using a Kasperski ( since this was detected by
    > KAV as a RBot variant ) based "On Demand" AV scanner ?
    >
    > --
    > Dave
    > http://www.claymania.com/removal-trojan-adware.html
    > http://www.ik-cs.com/got-a-virus.htm
    >
    >
    >


  • Next message: David H. Lipman: "Re: csecure.exe virus???"