Yes it was. Bu somehow when inserted into x64 bit machine it didn't work. Lost to much time on it that weekend so didn't get to investigate further. I took a pen drive with me armed with AV tools like mbam and prevex, it picked it up and immediately passed it on to other machines as it was inserted. The x64 machine was not infected and when I put the pen drive in it and used the x63 to download stuff I noticed the auto run file and the virus file. These were hidden on the other computers. As I moved from computer to computer it got infected. I had to disconnect all computers from the network so at first the pen drive was mu only means of copying tools. In the end I copied all the tools I needed to a CD. Found the files in task manager that were running the virus. Killed them ad ran the tools. Prevex was the tool that got rid of that one. Incidentally it was the only client that got attacked and the only one running Norton.
Cheers Peter. -----Original Message----- From: profox-boun...@leafe.com [mailto:profox-boun...@leafe.com] On Behalf Of Leland Jackson Sent: 23 September 2010 21:31 To: ProFox Email List Subject: Re: [NF] "Stuxnet Malware" Was the virus started by an autorun? Regards, LelandJ On 09/23/2010 02:52 PM, Peter Hart wrote: > Been there done that. > Spent the whole of an Easter holiday, Friday Night through to Tuesday > morning sleeping on the office floor at night to get rid of a virus > which was caught from an infected pen stick. > Only one machine was not infected and that was an XP 64 bit and the > pen drives could be examined on it and the virus just deleted. > > Cheers > > Peter > Peter Hart Computers. > > -----Original Message----- > From: profox-boun...@leafe.com [mailto:profox-boun...@leafe.com] On > Behalf Of Leland Jackson > Sent: 23 September 2010 20:46 > To: ProFox Email List > Subject: Re: [NF] "Stuxnet Malware" > > This sound like the virus may use autorun.ini file that can be > placed on CD/DVDs, disk drives, flash sticks, etc. The autorun.ini > file would be run automatically by the OS, as soon as it recognized > the device was present in the cd/dvd or usb port. > > The autorun.ini file would be in a folder of the device, like autorun, > and could be in a binary format. Below is an example of such a setup, > that came with my Western Digital Elements 2 TB usb disk drive: > _______________________________________________ Post Messages to: ProFox@leafe.com Subscription Maintenance: http://leafe.com/mailman/listinfo/profox OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/a57fa4cf19531343a2ee11b57db8e3af100...@server.peterhartcomputers.local ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
