Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | R: Potential Virus Problem |
|---|---|
| Date: | Thu, 7 Apr 2005 10:31:01 +0200 |
Can this help you? http://castlecops.com/postt109817.html Lino Riccobono -----Messaggio originale----- Da: Steve Earls [mailto:tron646@yahoo.com] Inviato: mercoledì 6 aprile 2005 22.23 A: focus-virus@securityfocus.com Oggetto: Potential Virus Problem Some of our business units are experiencing problems with a potential virus. We have searched the Web and various AV sites without much luck. Can anyone shed some light on the following symptoms? The symptoms are: 4 files appear in the winnt\system32 folder. ihotunib.exe, ikusefote.exe, rudim.exe and imaxavos.exe. These executables imbed themselves into the registry and kick off processes that inurn lock out user accounts at other company locations. Once these files are removed, it appears that a rpc_svchost process kicks off and consumes 99% of the available processor time. This renders the systems un-useable. W2k and XP systems are affected. The following seem to hit pretty close but not dead-on. · Win32/SdBot.45568!Worm (also known as: Backdoor.Win32.SdBot.gen) · Win32.Slinbot.ACT (also known as: W32/Sdbot.worm.gen.j, Backdoor.Win32.SdBot.gen) Steve __________________________________ Do you Yahoo!? Yahoo! Personals - Better first dates. More second dates. http://personals.yahoo.com
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | re: Potential Virus Problem, infosecgroup |
|---|---|
| Next by Date: | WinCE.Dust Remover Concept, Michael |
| Previous by Thread: | Potential Virus Problem, Steve Earls |
| Next by Thread: | WinCE.Dust Remover Concept, Michael |
| Indexes: | [Date] [Thread] [Top] [All Lists] |