full-disclosure - Possible Virus activity

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20050423022857.GD25016@surreal.seattlefenix.net>
Date: Sat Apr 23 03:35:27 2005
From: benjamin at seattlefenix.net (Benjamin Krueger)
Subject: Possible Virus activity

* Benjamin Krueger (benjamin@...ttlefenix.net) [050422 19:16]:
> * Jonathan Grotegut (jgrotegut@...ectpointe.com) [050422 18:10]:
> > Has anyone seen in the last couple of hours any signs of virus activity?  We have seen multiple computers through out our networks where the system process (and no, not the System Idle Process) using 100% of the processor.  We have seen it on both Windows 2000 and Windows XP machines so far.
> > 
> > I have checked several sites with no luck yet.
> > 
> > TIA
> > 
> > Jonathan Grotegut
> 
> You aren't alone. I'm fighting this bizzare problem on a network right now. 100% cpu usage
> on all affected machines. We don't see any unusual network traffic from these machines
> however. If the machine is rebooted, we can log back in but we never get to a useful 
> desktop because the CPU is too busy doing other crap.
> 
> Anyone else?

I suppose I should add that we are using Trend Micro's Client/Server Suite for SMB and it
has not caught anything relevant today.

-- 
Benjamin Krueger

"Nakedness is sinful. If God wanted us to go naked, we would have been born that way."