Re: Rundll32.exe - VIRUS !!

From: ondra (ondrahu@seznam.cz)
Date: 23. 09. 2002, 09:14 CEST


>> Subjekt se mi porad cpe skrz ZoneAlarm na internet. Je to
>> normalni?Mam to povolit/zakazat?Proc? Diky. -o:-)ndra-
>
> ZAKAZAT!!!  ODPOJIT!!! ODVIROVAT!!! Mas worma SirCam !
>
> Finally, it looks for "\windows\rundll32.EXE" on the share and replaces it with
> the worm, renaming the original to "run32.exe". When the worm is executed from
> "rundll32.exe" it automatically executes the backup file "run32.exe".
>
> http://www.cai.com/virusinfo/encyclopedia/
>
> pako Paco. 

Coze??? Doufam, ze je to omyl :o. Virus je to posledni na co mam podezreni.
Jsem tak trochu bezpecnostni fanatik (i kdyz provozuju win;-). Jedna se o muj
domaci comp:NOD-Amon rezidentne+POP3 scanner  (jednou za cas to projedu
i Kaspersky AV,eTrust EZ AV a Dr. Webem), ZoneAlarm, posledni zaplaty od
M$+docela prisna bezp. politika.

...kazdopadne dik za nakopnuti, ted musim vypadnout, ale uz tu bezi KAV s parametrem
"redundant":-) Pokud si mel pravdu, tak by mne docela zajimalo "Proc" a "Jak".

-o:-)ndra-



This archive was generated by hypermail 2.1.2 : 23. 09. 2002, 09:14 CEST