Security Basics mailing list archives
RE: Possible worm infection or something else?
From: "Fraser Morris" <frasermorris74 () hotmail com>
Date: Tue, 09 Dec 2003 18:33:41 +0000
Just reviewed my previous post, my apologies I forgot to post a link for the strain I found:
http://www.sophos.com/virusinfo/analyses/w32agobott.htmlIt runs as a service, look in the registry for key 'cfgldr' and a file in system32 called scvhost.exe.
Fraser _________________________________________________________________Tired of 56k? Get a FREE BT Broadband connection http://www.msn.co.uk/specials/btbroadband
--------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- RE: Possible worm infection or something else? Firefly Digital Media (Dec 01)
- <Possible follow-ups>
- RE: Possible worm infection or something else? Kris Wingard (Dec 01)
- RE: Possible worm infection or something else? Rama Rao Adharapurapu (Dec 01)
- RE: Possible worm infection or something else? James Arnott (Dec 02)
- RE: Possible worm infection or something else? Joey Matesic (Dec 02)
- RE: Possible worm infection or something else? Mike_Carter (Dec 02)
- RE: Possible worm infection or something else? Osvaldo Casagrande (Dec 02)
- Re: Possible worm infection or something else? Jimi Thompson (Dec 08)
- RE: Possible worm infection or something else? Fraser Morris (Dec 09)
- RE: Possible worm infection or something else? Fraser Morris (Dec 09)