[plug] [OT] Found new Windows virus

[Daniel Pearson]

I'd suggest booting up the machine in safe mode, and running both the Netsky 
and Gaobot removal tools. Had a very similar problem the other day and that 
fixed it.

Regards,
Daniel

Quoting Chris Caston <caston at arach.net.au>:

> Thanks,
> 
> I used to use NOD32 as well and found it to be very good. I only use AVG
> now because having access to free updates cuts a lot of red tape when
> dealing with hundreds of different customers, many of which won't buy
> things over the internet.
> 
> I submitted the virus to clamav.sf.net and hopefully they will know what
> to do with it.
> 
> thanks,
> 
> Chris Caston
> On Mon, 2004-05-17 at 12:28, ranime wrote:
> > Seriously, take a look at NOD32 AntiVirus Protection.
> > 
> > NOD32 Antivirus : http://www.nod32.com.au
> > 
> > I have the 'Update creation for mirror' option of NOD32 running under
> wine.
> > the mirror creates a virus database file that can be burnt to CD for 
> > updating NOD32 on windows machines that are not connected to the internet.
> > 
> > also,
> > 
> > _/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/
> >    NOD32 is the outright winner of Australian PC User
> >            "Best Antivirus Program of 2001" Award
> >            "Best Antivirus Program of 2002" Award
> >                "Best Buy" of 2001, 2002, and 2003
> >                                        and
> > holds an unequalled 26 Virus Bulletin VB100% Awards!
> > _/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/
> > 
> > It is Worth looking at..
> > 
> > Max...
> > 
> > 
> > 
> > Chris Caston wrote:
> > > Hello,
> > > 
> > > I found a new virus on a customers machine that could not be detected
> > > with Norton or AVG. I also e-mailed it to myself and Arachnet mail
> > > filter didn't pick it up.
> > > 
> > > Where do I report such things?
> > > 
> > > The virus posed as Windowsupdate.exe and killed taskmgr.exe and refused
> > > to let msconfig start. Unless of course you renamed them.
> > > 
> > > thanks,
> > > 
> > > Chris Caston
> > > 
> > 
> -- 
> Linux is ready for the desktop like a Boeing F-22 is ready for the
> run-way.
> 
> _______________________________________________
> PLUG discussion list: plug at plug.linux.org.au
> http://mail.plug.linux.org.au/cgi-bin/mailman/listinfo/plug
> Committee e-mail: committee at plug.linux.org.au
>