|
Approx date of arrival: 3/8/2005
Symptoms of infection:
Desktop hijack, multiple processes, and several O4 entries, all 3 letters, beginning with a capital letter. Files all of same size. Multiplies almost faster than you can kill it, set to replicate on a timed basis. Only way to fix currently, is to search for all exes with the specific description above. Found in Windows & System32 folders. Will post more when is needed.
UPDATE: 4/5/2005
The infection has been tweaked, requiring a special registry merge to fix the new desktop hijack, but its done and easy to do.
UPDATE: 3/18/2005
Once all files have been dound and deleted, and the desktop hiijack removed, this fix is done, time consuming, but seems to be ok.
_________________
IP:
|
|