lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
From: toddtowles at brookshires.com (Todd Towles)
Subject: Virus Problem

If you are not sure what is on the computer and not 100% sure you are able
to get everything off, then you really don't have an option. Clean install
would be the safest bet. I am not sure how many computers we are talking
about and if they are production. Clean install may not be a option, but it
maybe be the only way to know you are clean for sure.

I am sure you have DR plans, correct?

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Jay R ajaldas
Makhija
Sent: Tuesday, August 03, 2004 1:49 AM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Virus Problem



Hi,

We are having Windows 2000 network in the lab , We are stuck due to a
virus. The symptoms of it are :
1) Error message coming after login - "No Paging file found or paging file
too small" paging file limit is set to well above the limits still it
actually allocates 20 MB for it.It doesnot changes even after setting new
'Initial File size' & 'Maximum File Size'.

2) It disables the norton antivius.

We tried stinger for it & that found W32/Nachi.worm in svchost.exe and
deleted the svchost.exe. Still paging error is  same.

On searching google we found one more person havin similiar problem naming
it as 'badass virus' but do not found antivirus for it.

Please suggest that what could be done for it.

With regards
-- 
Jay Makhija
Sysad - WEL,EE Dept
IIT BOMBAY



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Powered by blists - more mailing lists