FYI: Avert Labs Dat Release Notification: 4828 Emergency Dat Files Release

FYI: Avert Labs Dat Release Notification: 4828 Emergency Dat Files Release
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
FYI: Avert Labs Dat Release Notification: 4828 Emergency Dat Files Release David H. Lipman 08-13-2006
Posted by David H. Lipman on August 13, 2006, 9:21 am
If you were  Registered and logged in, you could reply and use other advanced thread options
"The 4828 dat files have been released early due to the IRC-Mocbot!MS06-040
threat.

The various 4828 dat file packages can be found at
http://www.mcafee.com/apps/downloads/security_updates/dat.asp

Best Regards,

McAfee Avert Labs - Come visit our Blog -
http://www.avertlabs.com/research/blog/ "



--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by John Smith on August 13, 2006, 8:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> "The 4828 dat files have been released early due to the
> IRC-Mocbot!MS06-040 threat.
> The various 4828 dat file packages can be found at
> http://www.mcafee.com/apps/downloads/security_updates/dat.asp

Yes, McAfee removes the executables, but it doesn't fix the registry damage
done by this thing. Do you know what registry keys are modified?

On my win2k box, the administrative share C$ is gone after the infection.
I'm not sure how to get it back, or what other registry mischief may have
been done.




Posted by Dustin on August 15, 2006, 4:10 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
someone@somewhere.com says...
> > "The 4828 dat files have been released early due to the
> > IRC-Mocbot!MS06-040 threat.
> > The various 4828 dat file packages can be found at
> > http://www.mcafee.com/apps/downloads/security_updates/dat.asp
>
> Yes, McAfee removes the executables, but it doesn't fix the registry damage
> done by this thing. Do you know what registry keys are modified?
>
> On my win2k box, the administrative share C$ is gone after the infection.
> I'm not sure how to get it back, or what other registry mischief may have
> been done.

You could just goto grc.com and grab the letshare, noshare utilities.
letshare should restore it for you.

--
Dustin Cook
Author of BugHunter - MalWare Removal Tool
Version 1.9.2 Released August 15th, 2006
Last Pattern Update: August 15th, 2006
http://bughunter.it-mate.co.uk

Similar ThreadsPosted
Avert Labs Dat Release Notification: 4789 Emergency Dat Files Release June 20, 2006, 8:34 pm
FYI: Avert Labs Dat Release Notification: 4899 Emergency Dat Files Release November 17, 2006, 7:35 pm
FYI: Avert Labs Dat Release Notification: 4915 Emergency Dat Files Release December 10, 2006, 8:25 am
FYI: Avert Labs Dat Release Notification: 4997 Emergency Dat Files Release March 30, 2007, 9:31 pm
FYI: Avert Labs Dat Release Notification: 4997 Emergency Dat Files Release March 30, 2007, 9:54 pm
AVERT Dat Release Notification: 4716 Dat Files Notification March 10, 2006, 6:24 pm
Press Release April 12, 2006, 10:36 am
Delivery Notification - Your_Updated_Password! May 2, 2007, 10:02 pm
AVERT Low-Profiled Threat Notice: OSX/Inqtana.a February 20, 2006, 3:57 am
Is Zone Labs site down? December 22, 2006, 3:45 pm

The site map in XML format XML site map

Contact Us | Privacy Policy