http://securityresponse.symantec.com/avcenter/venc/data/w32.esbot.a.html
Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of FastWave Sent: Tuesday, August 16, 2005 6:14 PM To: [email protected] Subject: [IMail Forum] VIRUS WARNING VIRUS WARNING ------------- For the past 2 days, our server that runs IMail was bringing the rest of our network to a crawl. If we disconnected this server from the network, then the network would restore to normal. Just in case anyone else is having network problems, this may be the cause. Here's what we did to fix it. In the Windows Task Manager, look for either of two programs/processes: mousebm.exe mousesync.exe You will not be able to end these processes from Task Manager. You must first open the Registry Editor and search for the following folders and delete them: HKLM/System/ControlSet001/Services/Mousebm HKLM/System/ControlSet001/Services/Mousesync HKLM/System/ControlSet002/Services/Mousebm HKLM/System/ControlSet002/Services/Mousesync Then reboot the server. After rebooting, you will now be able to delete the two offending files. They are located in: c:\winnt\system32\mousebm.exe c:\winnt\system32\mousesync.exe If you find that the offending files re-appear in the Task Manager, look for the following file and delete it: c:\winnt\system32\i You will have to repeat the above steps again. We searched Trend Micro, Symantec, McAfee, and Google for these files, but none of these web sites had any information on them. Perhaps, this virus has not yet been identified by them. Good luck! --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
