> Explorer.exe
> Exception Access Violation (0xc0000005), Address:0x77f7d18e
the virus seems to do something in it's later stages of infection that
causes the problem you describe. Removing the virus has no effect.
We have two servers with the same problem, and have tried everything to
correct it - if we don't hear of a fix soon it's going to be format time.
some people are still unclear on this virus - check your processes in task
manager, look for 'mmc.exe' - this is the virus masquerading as the
management console. You have to use the kill utility to finish off the
process. Then delete mmc.exe from the winnt directory. Get the latest AV
definitions and do a scan to quarrantine all the nasty files. delete them.
also get people display the 'view as web page' or whatever it is in 'folder
options' - this is perpetuating the virus because you can start it off just
by selecting the file in the folder.
you may also find that your 'guest' account is now a member of the local
administrators group!
the virus propogates via email, network shares and an IIS backdoor.
dan.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
