Security Incidents mailing list archives

Curious AV behavior wrt Nimda


From: "kawaii" <trunks () stackers org>
Date: Tue, 18 Sep 2001 15:30:27 -0400

I've noticed several odd things about the virus, and the McAfee Dat that
fixes it.

1) The virus seems to start a 'mmc', 'net', and other processes, which
typically result in the crashing of explorer, and the eventual DoS of the
machine.

2) The Dat that fixes the virus seem to be deleting .exe files almost at
random. Is there any way to recover the lost .exe or are a lot of my
programs really fubar'd now?

Ever lovable and always scrappy,
kawaii


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: