Virus Alert

Jim · Jul 15, 2003

Just installed McAfee VirusScan Home Edition 7 and
receiving a Virus
Alert "C:\WINNT\security\config\svchost.exe,1,ServU-
Daemon".
Can anyone tell us what this is and what to do. It happens
when we go the Internet. Presently we are OKing it.

Fabio · Jul 17, 2003

In all probability, it's a trojan. Could be this one:
http://vil.nai.com/vil/content/v_100054.htm. Be sure to let your AV program
take care of that Trojan ASAP.

Hope this helps. Regards,

Fabio

Joel Parlin · Jul 17, 2003

It's an FTP program. We had the Bat/mumu.worm here and
that was one of the programs that it installed. Look at
the Windows services for psexecsvc and 2 DameWare
programs. These are all remote control programs. If these
services are running, you have to go to the registry to
get rid of them.

Virus Alert

Jim

Fabio

Joel Parlin