http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]
Sheesh! That's nice.
What really gets me on these bugs, is that you're supposed to disable System
Restore in ME/XP You would think that compressed backup data would be
immune to this sort of thing. What's the point of
Thanks Kami.
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.Virus-
[EMAIL PROTECTED] On Behalf Of Kami Razvan
Sent: Saturday, September 06, 2003 1:12 PM
To: [EMAIL PROTECTED]
What really gets me on these bugs, is that you're supposed to disable
System
Restore in ME/XP You would think that compressed backup data would be
immune to this sort of thing. What's the point of having sys restore if
everytime you MAY have a virus you need to wipe ALL the restore data?
Right, I got that, but if you have 3 months of CLEAN restore points, you
only just got infected today, for example, you shouldn't have to trash
every
restore point, only today's, or even yesterday's, or even a month back.
for
that matter.. If that's the only way, why have restore points at
Now we have to worry about viruses in picture files?
Nope - it's a normal .EXE attachments (just disguised as 911.exe). It's an
old trick - either using double extensions (e.g. .JPG.EXE) or using MIME
headers that refer to it as a picture - but the system file type is .EXE.
A good virus
