FYI: Avert Labs Dat Release Notification: 4828 Emergency Dat Files Release

  • Thread starter Thread starter David H. Lipman
  • Start date Start date
David H. Lipman said:
"The 4828 dat files have been released early due to the
IRC-Mocbot!MS06-040 threat.
The various 4828 dat file packages can be found at
http://www.mcafee.com/apps/downloads/security_updates/dat.asp
Click to expand...

Yes, McAfee removes the executables, but it doesn't fix the registry damage
done by this thing. Do you know what registry keys are modified?

On my win2k box, the administrative share C$ is gone after the infection.
I'm not sure how to get it back, or what other registry mischief may have
been done.
 
Yes, McAfee removes the executables, but it doesn't fix the registry damage
done by this thing. Do you know what registry keys are modified?

On my win2k box, the administrative share C$ is gone after the infection.
I'm not sure how to get it back, or what other registry mischief may have
been done.
Click to expand...

You could just goto grc.com and grab the letshare, noshare utilities.
letshare should restore it for you.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool
Version 1.9.2 Released August 15th, 2006
Last Pattern Update: August 15th, 2006
http://bughunter.it-mate.co.uk
 
Back
Top