Re: Possible new virus?

["Lee Rich" <lee.rich () wlga gov uk>]

Hate to rain on your parade Chris, but Matt did state that 'I wouldn't think twice if it hadn't happened to 3 computers 
from 3 different vendors in 2 days'.

I'm no statistician, but that's one hell of a coincidence for exactly the same symptoms to occur on three seperate 
machines.

What would interest me however, is at what point the message was displayed; and if displayed during POST, are each of 
the machines using the same BIOS?

If we took everything for face value then we'd be a little bit more than nieve in the securty department.

('svchost.exe caused an error'.. the problem is obviously with svchost.exe... couldn't be MSBlast.. right?)

> "I'm not sure how it made it on to the list"

And please don't forget, this is 'security-basics'.. which means to me, that it's not all security experts here, it's 
people breaking into the field aswell. So you should expect questions that may be simple to yourself, but to others, 
it's part of a learning curve.

-Lee Rich
security () wlga gov uk

-----Original Message-----
From: Chris Berry <compjma () hotmail com>
To: security-basics () securityfocus com <security-basics () securityfocus com>
Sent: 09/09/2003 21:21
Subject: Re: Possible new virus?


> From: Wirefire Systems Administrator <sysadmin () wirefire com>
[snip]
> cpu cooling fan is malfunctioning
[snip]
> Accompanying this is a high-pitched tone from the PC speaker.

Ahem...Perhaps a warning tone that YOUR COOLING SYSTEM HAS FAILED??  This is 
not a security question, I'm not sure how it made it on to the list, but 
please take it to a hardware support forum.  Most likely the fan is full of 
crud and has overloaded the fan header, try cleaning the fan, and swapping 
to a different header.

Chris Berry
compjma () hotmail com
Systems Administrator
JM Associates

"Conciousness: that annoying time between naps."

_________________________________________________________________
Get a FREE computer virus scan online from McAfee. 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963


---------------------------------------------------------------------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------
***************************************************************
SAVE PAPER - THINK BEFORE YOU PRINT!   
I ARBED PAPUR - PWYLLWCH CYN PRINTIO!  
***************************************************************

---------------------------------------------------------------------------
Captus Networks 
Are you prepared for the next Sobig & Blaster? 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans 
 - Precisely Define and Implement Network Security 
 - Automatically Control P2P, IM and Spam Traffic 
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit 
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------