Security Incidents mailing list archives

While we're on viruses...

From: kmccammon () TIDALWAVE NET (Keith McCammon)
Date: Fri, 19 May 2000 11:46:04 -0400


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey all,

A co-worker came in today and his home PC found "Subseven 22", which
can only be the 2.2 beta release.  Norton 2000 could not "clean" the
virus, but it did delete the infected file.  However, with previous
versions of SubSeven, the registry changes had to be made before the
file was deleted.

Anyone know anything about the latest release of this fine virus?  In
particular I'm looking for the latest registry fixes and such for
total eradication.

Many thanks...

Keith W. McCammon
Network Administrator
Quantum Communications, Inc.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBOSVhvCUq8IR1X4ipEQLcwQCg35ABMDupnt86vSGWfMrpOU7BDv0AniwL
da8A8mJPA+xRqziWLRLzMrbQ
=d5bZ
-----END PGP SIGNATURE-----

Current thread:

Re: Korea a classic ? was: IP blacklist Doglus Cho (May 15)
- Re: Korea a classic ? was: IP blacklist Jens Hektor (May 16)
  - Re: Korea a classic ? was: IP blacklist Russell Fulton (May 16)
    - Re: Korea a classic ? was: IP blacklist Jane DelFavero (May 18)
- Strange logs and scans. Lic. Rodolfo Gonzalez Gonzalez (May 17)
  - Re: Strange logs and scans. * * (May 19)
  - While we're on viruses... Keith McCammon (May 19)
- <Possible follow-ups>
- Re: Korea a classic ? was: IP blacklist Doglus Cho (May 16)
- Re: Korea a classic ? was: IP blacklist Cho, Douglas (May 17)