This is an interesting one, it comes through as a print processor and gets called by spoolsv,eve: http://www.surfright.nl/en/home/press/tdl3-rootkit-still-large-issue-for-anti-virus-programs
We had a machine hit with it but I can't tell if McAfee should have caught it or not - we don't have McAfee locking the machines down very hard but reading the article I don't know if it would have even caught it. Stu - does Vipre catch this one? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
