 |
|  |
 |
|  |
 |
|
blackice
|
 |
Canada where else...
Sep 2000 time: 00:17
|
|
No biggy glad to be of help, Trend one of the best ones out there IMHumbleO. 
We joke at work that Trend creates the viruses, simply because they have the fix before it comes out or very quickly there after.
Mind you if they hear, get word of, see it coming they create a fix for it and all and any possible variants at the same time.
That explains why I have had 2-3 updates to PC-Cillin per day for a week now.
Be warned people the Sobigf variant virus has a new payload. It is a trojan and no one knows what is is going to do, to date.
At the very least, block UDP port 8998 on your firewalls and your systems. That should mitigate damages somewhat by blocking the worm from downloading any further malicious code.
In other words the trojan could simply be waiting for instructions on what to do next.
SoBig.F uses the filename winppr32.exe, and that it copies itself to the Windows folder, making one of the registry entries shown here in the process. Because SoBig.F has its own SMTP engine, collects e-mail addresses from various files on an infected computer, and then forges the sender's e-mail, it is very difficult to determine who is infected based on an infected message.
There are a few manual removal options. Trend Micro provides manual removal instructions for SoBig.F
The worst of SoBig.F may not be over yet. Because of the unpredictable dangers inherent with the hidden Trojan that appears to be included with SoBig.F, every administrator should move quickly to mitigate the damage that could be caused by this worm by following the recommendations mentioned above for removing SoBig.F and blocking its communications ability.
|
|
|  |
 |
|  |
 |
|
ricketyclik
|
 |
Great Southern Land
Feb 2002 time: 15:17
|
|
Gentlemen, please use rick at webone dot com dot au for my email address from now on. Thanks.
Last edited by ricketyclik on 31-08-2003 at 04:33
|
|
|  |
All times are GMT. The time now is 05:17. Apolyton Time is 00:17. |
top of page
|
|
|
Forum Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
|
HTML code is ON
vB code is ON
Smilies are ON
[IMG] code is ON
|
|
|
|
|
|