Security Incidents mailing list archives

new NT worm


From: e lee <leewme () EXCITE COM>
Date: Fri, 29 Dec 2000 00:32:31 -0800

Hi,

a friend of mine has reported the following problem on his NT network:

1. a number of NT machines on the network were suddenly unusable

2. a further check found that two important system files were deleted:
HAL.DLL and NTOSKRNL.exe

3. there is an incomplete a-virus log complains of i.exe, j.exe and 1.exe,
but the log file was not available.

4. use a-virus sw to scan but doesn't report any problem

the worm is spreading fast on the network, probably through email or shared
file.

Anyone has any idea of this problem? is it a new worm? any suggestions are
highly appreciated.






_______________________________________________________
Send a cool gift with your E-Card
http://www.bluemountain.com/giftcenter/


Current thread: