nebiwo virus

[Don]

I installed Symantec 2004 anti virus and ran the program for virus detection
and there were none found. Then for two days in a row, I had a screen
message that said it removed the nebiwo virus. Why did it not detect it in
the first place and why two days in a row?
Don

 

[David H. Lipman]

Don:

McAfee calls this the "MultiDropper-FL"

Please read http://vil.nai.com/vil/content/v_100124.htm

The site indicates "AVERT has received a new variant of this MultiDropper that tries to
access other systems through Microsoft Networking, using the IPC$ share."

If you have File and Print shares enabled, NAV may be picking up this Trojan trying to
infect the IPC$ share via the Internet and thus it is NOT on your PC but was trying to get
there during that two day period. My assumption is that SAV caught it in that process.

Dave




| I installed Symantec 2004 anti virus and ran the program for virus detection
| and there were none found. Then for two days in a row, I had a screen
| message that said it removed the nebiwo virus. Why did it not detect it in
| the first place and why two days in a row?
| Don
|
|