From: toddtowles at brookshires.com (Todd Towles)
Subject: Virus Problem

If you are not sure what is on the computer and not 100% sure you are able
to get everything off, then you really don't have an option. Clean install
would be the safest bet. I am not sure how many computers we are talking
about and if they are production. Clean install may not be a option, but it
maybe be the only way to know you are clean for sure.

I am sure you have DR plans, correct?

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Jay R ajaldas
Makhija
Sent: Tuesday, August 03, 2004 1:49 AM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Virus Problem



Hi,

We are having Windows 2000 network in the lab , We are stuck due to a
virus. The symptoms of it are :
1) Error message coming after login - "No Paging file found or paging file
too small" paging file limit is set to well above the limits still it
actually allocates 20 MB for it.It doesnot changes even after setting new
'Initial File size' & 'Maximum File Size'.

2) It disables the norton antivius.

We tried stinger for it & that found W32/Nachi.worm in svchost.exe and
deleted the svchost.exe. Still paging error is  same.

On searching google we found one more person havin similiar problem naming
it as 'badass virus' but do not found antivirus for it.

Please suggest that what could be done for it.

With regards
-- 
Jay Makhija
Sysad - WEL,EE Dept
IIT BOMBAY



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Hosted by DataForce ISP - Powered by Openwall GNU/*/Linux