Re: I'm an idiot....

From: Dirro, Toralv (Toralv_Dirroat_private)
Date: Fri Oct 15 1999 - 07:32:01 PDT

  • Next message: Alan Cox: "Re: PAM applications running as root (Was Re: WebTrends Enterprise"

    >
    > I knew it was an email worm.  In the progress of erasing it I must of
    > hit enter, or double clicked on it.
    >
    > Maybe my mouse should be taken away from me.....
    >
    >
    > When the attached file is executed, it will create the following two
    > files:
    > C:\WINDOWS\LINKS.VBS
    > C:\WINDOWS\SYSTEM\RUNDLL.VBS
    > It will also create a file called LINKS.VBS in the root of all network
    
    That verly likely is VBS/Freelink - any recent AV-Software should handle it.
    If you're scanning, make sure to scan all files, as .vbs is not a default
    extension in many products, yet! This also affects OnAccess Scanners, so be
    aware.
    
    
    best regards,
    Toralv Dirro
    Virus Research Engineer
    Network Associates
    AVERT, Central Europe
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:07:37 PDT