[Dshield] Constant reinfection?

Wayne Beckham wbeckham at yahoo.com
Tue Aug 19 22:10:18 GMT 2003


Is anyone else running into where the Nachii is
constantly reinfecting?  I suspect user errors, but
I've never seen a virus that is so hard to get rid of.

Machines previously cleared are reinfected in only a
few minutes.  We following these steps:

If Win2k, MUST be at SP-2.

Run McAfee's stinger.

Reboot.

Apply the MS-Patch for the O/S.

Reboot.

Apply the latest A/V signature files.

Reboot.

Once the machine is brought, we get ICMP flooded!

HELP!

Any help greatly appreciated.

- WB

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com




More information about the list mailing list