<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR></HEAD>
<BODY style="MARGIN-TOP: 2px; FONT: 10pt Book Antiqua; MARGIN-LEFT: 2px">
<DIV>Chris,</DIV>
<DIV>If possible download a copy of Sophos Anti-Virus and run it. If the
PC is a Windows NT/2K or XP then download the sav32cli and the latest
ides.zip. Copy protect the ides on a floppy and run the the
following:</DIV>
<DIV><!--StartFragment --> <TT>SAV32CLI -IDEDIR=A:\ -REMOVE
-P=C:\LOGFILE.TXT</TT> </DIV>
<DIV> </DIV>
<DIV><A
href="http://www.sophos.com/support/disinfection/worms.html">http://www.sophos.com/support/disinfection/worms.html</A></DIV>
<DIV> </DIV>
<DIV>Jon</DIV>
<DIV> </DIV>
<DIV>Jon L. Miller, MCNE, CNS, ASE<BR>Director/Sr Systems Consultant<BR>MMT
Networks Pty Ltd<BR><A
href="http://www.mmtnetworks.com.au">http://www.mmtnetworks.com.au</A></DIV>
<DIV> </DIV>
<DIV>"I don't know the key to success, but the key to failure<BR> is trying
to please everybody." -Bill Cosby</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>>>> caston@arach.net.au 12:01:16 pm 17/05/2004
>>><BR>Hello,<BR><BR>I found a new virus on a customers machine that
could not be detected<BR>with Norton or AVG. I also e-mailed it to myself and
Arachnet mail<BR>filter didn't pick it up.<BR><BR>Where do I report such
things?<BR><BR>The virus posed as Windowsupdate.exe and killed taskmgr.exe and
refused<BR>to let msconfig start. Unless of course you renamed
them.<BR><BR>thanks,<BR><BR>Chris Caston<BR><BR>-- <BR>Linux is ready for the
desktop like a Boeing F-22 is ready for
the<BR>run-way.<BR><BR>_______________________________________________<BR>PLUG
discussion list: plug@plug.linux.org.au<BR><A
href="http://mail.plug.linux.org.au/cgi-bin/mailman/listinfo/plug">http://mail.plug.linux.org.au/cgi-bin/mailman/listinfo/plug</A><BR>Committee
e-mail: committee@plug.linux.org.au<BR><BR></DIV></BODY></HTML>