RE: Virus infection procedure

["Apurva Dhanwantri" <apurva_dhanwantri () kaleconsultants com>]

Continuation to Nand , Malware Analysis is an important area to explore so
as to understand origin of malware and its impact on business and also to
take preventive action.

Once infection has been identified, analysis of file can be done through:

1. http://anubis.iseclab.org/ 
2. http://virusscan.jotti.org/en 
3. http://www.virustotal.com/advanced.html 
4. http://wepawet.iseclab.org/ 


- Apurva

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Nand J
Sent: 26 September 2011 12:32
To: eric.buggenhout () gmail com
Cc: security-basics () securityfocus com
Subject: Re: Virus infection procedure

Hi Eric,
Same issue i observed in my organization's network.
Just simply do one work around - steps:-1] find out Autorun.inf file
on removable drive. It has hidden, readonly, System and archive
attributes.
2] once you find this inf file delete it (shift+Del). if not deleted
in normal mode delete it by restarting system in safe mode.
3] once deleted autorun.inf file, immediately create new folder and
rename it Autorun.inf
Note the name should be same as Autorun.inf

Check results and revert me.

Bye


On 9/23/11, eric.buggenhout () gmail com <eric.buggenhout () gmail com> wrote:
> Hello list,
>
>
> Yesterday we had a virus infection on the PC of one of our technical
support
> guys here at my company. Normally it's not really my problem but I'm
> somewhat of the go-to guy for security here so they called me up.
>
> We have antivirus software installed on all hosts (Symantec Endpoint
> Protection) and updated a couple of times every day but when he attached
an
> (infected) external HDD to his PC the virus/worm got in anyway.
> I know that no antivirus software is 100% virusproof so my question for
you
> guys is :
>
> What would be the best procedure to follow in case you get infected
anyway?
> Best regards,
>
> Eric Buggenhout
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate.  We look at how SSL works, how it benefits your company and
how
> your customers can tell if a site is secure. You will find out how to
test,
> purchase, install and use a thawte Digital Certificate on your Apache web
> server. Throughout, best practices for set-up are highlighted to help you
> ensure efficient ongoing management of your encryption keys and digital
> certificates.
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company and how
your customers can tell if a site is secure. You will find out how to test,
purchase, install and use a thawte Digital Certificate on your Apache web
server. Throughout, best practices for set-up are highlighted to help you
ensure efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
------------------------------------------------------------------------


<a href=  "http://svy.mk/Airline_Preparedness_Survey_Wave_3";>
<img src=  "http://email.kaleconsultants.com/imgs/e_sign_sis_survey3.jpg";></a><p>
Disclaimer: This email (including any attachments) is intended for the sole
use of the recipient/s and may contain material that is CONFIDENTIAL. Any
unauthorized disclosure / copying / distribution or forwarding of this message 
or part is STRICTLY PROHIBITED. If you have erroneously received this message,
please delete it immediately and notify the sender. No liability is assumed for
any errors and/or omissions in the contents of this message. Information in 
this message that does not relate to the official business of this Company
shall be understood as neither given nor endorsed by it. If verification is
required please request a hard-copy version. 

To know more about Kale Consultants, visit www.kaleconsultants.com 

-=-=-=-=-=-=-=-=-=-



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------