but then they'll just use voice-recognition software, would they not?

Regards

Tony Patton
Desktop Operations Cavan
Ext 8078
Direct Dial 049 435 2878
email: [email protected]



From:
"Maglinger, Paul" <[email protected]>
To:
"NT System Admin Issues" <[email protected]>
Date:
04/12/2009 15:08
Subject:
RE: New virus trick



I?m still in favor of the ?Ball-peen hammer to fingers? method of 
behavioral modification used in the movie Casino?
 
From: Lee Douglas [mailto:[email protected]] 
Sent: Friday, December 04, 2009 8:52 AM
To: NT System Admin Issues
Subject: Re: New virus trick
 
Or at least public flogging!
On Fri, Dec 4, 2009 at 9:46 AM, Mike Sullivan <[email protected]> wrote:
Man, these malware creators are evil! I vote we bring back public 
hangings! 
 
On Fri, Dec 4, 2009 at 6:39 AM, John Aldrich <[email protected]
> wrote:
I was at a seminar yesterday put on by Sunbelt and during a break I had a 
chance to talk to one of the presenters and told him of a recent malware 
incident I?d cleaned up. He?d never heard of such a trick before so I 
thought I?d bring it to y?all?s attention so you can be on the lookout for 
it. Basically it was the same old malware that?s been going around with 
the Antivirus Pro sort of stuff, but the twist was that even using Malware 
Bytes we were not able to get rid of it. After I was poking around a bit, 
(I don?t recall why I was looking at the root of C:, but I was) I noticed 
a batch file in the root of the C: drive that, when I opened it and looked 
at it, it created a bunch of scheduled tasks to re-download the 
malware/adware. I wised up and deleted that file, then went into the 
Scheduled Tasks and deleted all the malware-created scheduled tasks. Then 
I was able to successfully clean the stuff out!
What really got us was that Malware Bytes would clean it, then say it 
needed to reboot to finish, and then as soon as we came back, the fake 
antivirus was right back there. What I believe it was doing was 
re-downloading itself from the internet each time we cleaned it. So, 
anyway, if you guys ever have a problem like this, it wouldn?t hurt to 
check the scheduled tasks!
 

 
 
 



-- 
Mike Sullivan
[email protected]
 
 
 
 
 
 
 
====================================================================
http://www.quinn-insurance.com

This e-mail is intended only for the addressee named above. The contents
should not be copied nor disclosed to any other person. Any views or
opinions expressed are solely those of the sender and
do not necessarily represent those of QUINN-Insurance, unless otherwise
specifically stated . As internet communications are not secure,
QUINN-Insurance is not responsible for the contents of this message nor
responsible for any change made to this message after it was sent by the
original sender. Although virus scanning is used on all inbound and
outbound e-mail, we advise you to carry out your own virus check before
opening any attachment. We cannot accept liability for any damage sustained
as a result of any software viruses.

====================================================================

QUINN-Life Direct Limited is regulated by the Financial Regulator.
QUINN-Insurance Limited is regulated by the Financial Regulator and
regulated by the Financial Services Authority for the conduct of UK
business.

====================================================================

QUINN-Life Direct Limited is registered in Ireland, registration number
292374 and is a private company limited by shares.
QUINN-Insurance Limited is registered in Ireland, registration number
240768 and is a private company limited by shares.
Both companies have their head office at Dublin Road, Cavan, Co. Cavan.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

<<image/jpeg>>

<<image/jpeg>>

Reply via email to