RE: New Virus / Worm ??

[John Bricher]

On the servers that were infected at our company, we found a mmc.exe that
was running in c:\winnt.  This appeared to be regenerating the readme.eml
files.  We killed the process, deleted the file, and deleted the .eml files.
This appears to have worked for now.

Not sure how to stop it from happening again.


John Bricher
Windows NT Engineer
Cybear, Inc.
561-999-3549
[EMAIL PROTECTED]



_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]