OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: [Full-disclosure] Possible Virus activity

From: Jonathan Grotegut (jgrotegutdirectpointe.com)
Date: Fri Apr 22 2005 - 21:33:57 CDT


One of the things one of our techs has found is it is somehow related to Trend Office Scan, one of our techs killed all the services on one of the computer he could, he started them up one by one. Once he started Trend Officescan service the System process spiked. Possible update today on Trend that botched it?
 
Jonathan Grotegut

________________________________

From: Danny [mailto:nocmonkeygmail.com]
Sent: Fri 4/22/2005 8:25 PM
To: Benjamin Krueger
Cc: Jonathan Grotegut; full-disclosurelists.grok.org.uk
Subject: Re: [Full-disclosure] Possible Virus activity

On 4/22/05, Benjamin Krueger <benjaminseattlefenix.net> wrote:
> You aren't alone. I'm fighting this bizzare problem on a network right now. 100% cpu usage
> on all affected machines. We don't see any unusual network traffic from these machines
> however. If the machine is rebooted, we can log back in but we never get to a useful
> desktop because the CPU is too busy doing other crap.

A detailed network sniff leads to nothing?

...D

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/