Re: Rundll32.exe - VIRUS !!

From: Paco (paco@seznam.cz)
Date: 23. 09. 2002, 01:08 CEST


> Subjekt se mi porad cpe skrz ZoneAlarm na internet. Je to
> normalni?Mam to povolit/zakazat?Proc? Diky. -o:-)ndra-

ZAKAZAT!!!  ODPOJIT!!! ODVIROVAT!!! Mas worma SirCam !

Finally, it looks for "\windows\rundll32.EXE" on the share and replaces it with
the worm, renaming the original to "run32.exe". When the worm is executed from
"rundll32.exe" it automatically executes the backup file "run32.exe".

http://www.cai.com/virusinfo/encyclopedia/

pako Paco. 


______________________________________________________________________
Reklama:
Prekvapive dobry signal! Presvedcte se v Oskar Testu ...
http://www.oskarmobil.cz/oskartest



This archive was generated by hypermail 2.1.2 : 23. 09. 2002, 01:09 CEST