RE: Explorer Dr. Watsons

From: Arnold, Jamie (harnoldat_private)
Date: Tue Sep 18 2001 - 16:28:08 PDT

  • Next message: Tom Smit: "RE: New "concept" virus/worm?"

    We've seen several boxes where drwatson.exe has been renamed to drwatson
    .exe (note the space before the dot) and the attribs reset to system and
    hidden.  There were 7 other files that we found that have been effected in
    the same fashion on these boxes.
    
    Jamie
    
    
    	**********************************
    	"I've had a wonderful time, but this wasn't it." 
    	Groucho Marx 
    	**********************************
    
    
    
    -----Original Message-----
    From: Chris Thornberry [mailto:chrisat_private]
    Sent: Tuesday, September 18, 2001 3:32 PM
    To: incidentsat_private
    Subject: Explorer Dr. Watsons
    
    
    Has anyone been experiencing issues with Dr. Watson Application errors
    in EXPLORER.EXE. Ever since this morning and the W32.Nimda.A@mm issue
    some of my servers have had issues trying to run anything.
    
    Does anyone know of a relation between the two?
    
    Regards,
    Chris
    
    --------------------------------------------
    Chris Thornberry MCSE, CCNA, A+
    Systems Engineer
    Cameron & Associates, Inc.
    E-mail:  chrisat_private
    --------------------------------------------    
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Tue Sep 18 2001 - 17:56:58 PDT