full-disclosure - Virus Problem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <001501c47961$31e84230$fc11010a@msad.brookshires.net>
From: toddtowles at brookshires.com (Todd Towles)
Subject: Virus Problem

If you are not sure what is on the computer and not 100% sure you are able
to get everything off, then you really don't have an option. Clean install
would be the safest bet. I am not sure how many computers we are talking
about and if they are production. Clean install may not be a option, but it
maybe be the only way to know you are clean for sure.

I am sure you have DR plans, correct?

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Jay R ajaldas
Makhija
Sent: Tuesday, August 03, 2004 1:49 AM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Virus Problem

Hi,

We are having Windows 2000 network in the lab , We are stuck due to a
virus. The symptoms of it are :
1) Error message coming after login - "No Paging file found or paging file
too small" paging file limit is set to well above the limits still it
actually allocates 20 MB for it.It doesnot changes even after setting new
'Initial File size' & 'Maximum File Size'.

2) It disables the norton antivius.

We tried stinger for it & that found W32/Nachi.worm in svchost.exe and
deleted the svchost.exe. Still paging error is  same.

On searching google we found one more person havin similiar problem naming
it as 'badass virus' but do not found antivirus for it.

Please suggest that what could be done for it.

With regards
-- 
Jay Makhija
Sysad - WEL,EE Dept
IIT BOMBAY

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html