W97M/Marker.T Virus found by Forefront on file server

W97M/Marker.T Virus found by Forefront on file server
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
W97M/Marker.T Virus found by Forefront on file server Sandy Wood 07-25-2008
Posted by =?Utf-8?B?U2FuZHkgV29vZA==?= on July 25, 2008, 10:21 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I'm posting this here because I'm not getting any response in the Forefront
forums. (What happened over there? They used to be so responsive? Maybe the
new look) The Forefront client has discovered W97M/Marker.T on one of my file
servers. I've chosen to have it removed by FCS and it's now in a state of
"Taking Actions....". This has been going on for a hour now and the System
Event log is filling up with FCSAM Information events every 15 or so seconds
saying FCS is taking action. How long should I wait for this to finish?
--
Sandy Wood
Orange County District Attorney

Posted by PA Bear [MS MVP] on July 25, 2008, 12:30 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Contact Forefront Support: You (or rather, your employer) is paying for it.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Sandy Wood wrote:
> I'm posting this here because I'm not getting any response in the
> Forefront
> forums. (What happened over there? They used to be so responsive? Maybe
> the
> new look) The Forefront client has discovered W97M/Marker.T on one of my
> file servers. I've chosen to have it removed by FCS and it's now in a
> state
> of "Taking Actions....". This has been going on for a hour now and the
> System Event log is filling up with FCSAM Information events every 15 or
> so
> seconds saying FCS is taking action. How long should I wait for this to
> finish?


Posted by PA Bear [MS MVP] on July 25, 2008, 12:53 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
PS: Have you tried posting to microsoft.public.security.forefront newsgroup?

PA Bear [MS MVP] wrote:
> Contact Forefront Support: You (or rather, your employer) is paying for
> it.
>
> Sandy Wood wrote:
>> I'm posting this here because I'm not getting any response in the
>> Forefront
>> forums. (What happened over there? They used to be so responsive? Maybe
>> the
>> new look) The Forefront client has discovered W97M/Marker.T on one of my
>> file servers. I've chosen to have it removed by FCS and it's now in a
>> state
>> of "Taking Actions....". This has been going on for a hour now and the
>> System Event log is filling up with FCSAM Information events every 15 or
>> so
>> seconds saying FCS is taking action. How long should I wait for this to
>> finish?


Posted by =?Utf-8?B?U2FuZHkgV29vZA==?= on July 25, 2008, 1:04 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Yes....lately my posts have just sat there...maybe the new forum style?
--
Sandy Wood
Orange County District Attorney


"PA Bear [MS MVP]" wrote:

> PS: Have you tried posting to microsoft.public.security.forefront newsgroup?
>
> PA Bear [MS MVP] wrote:
> > Contact Forefront Support: You (or rather, your employer) is paying for
> > it.
> >
> > Sandy Wood wrote:
> >> I'm posting this here because I'm not getting any response in the
> >> Forefront
> >> forums. (What happened over there? They used to be so responsive? Maybe
> >> the
> >> new look) The Forefront client has discovered W97M/Marker.T on one of my
> >> file servers. I've chosen to have it removed by FCS and it's now in a
> >> state
> >> of "Taking Actions....". This has been going on for a hour now and the
> >> System Event log is filling up with FCSAM Information events every 15 or
> >> so
> >> seconds saying FCS is taking action. How long should I wait for this to
> >> finish?
>
>

Posted by PA Bear [MS MVP] on July 25, 2008, 1:32 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Sounds like you may be confusing the Forefront newsgroup
(microsoft.public.security.forefront) with the Forefront forums, Sandy =>
http://forums.microsoft.com/forefront/default.aspx?siteid=41

EDIT: Maybe not. Looks like those forums were moved in late May but...


Sandy Wood wrote:
> Yes....lately my posts have just sat there...maybe the new forum style?
>
>> PS: Have you tried posting to microsoft.public.security.forefront
>> newsgroup?
>>
>> PA Bear [MS MVP] wrote:
>>> Contact Forefront Support: You (or rather, your employer) is paying for
>>> it.
>>>
>>> Sandy Wood wrote:
>>>> I'm posting this here because I'm not getting any response in the
>>>> Forefront
>>>> forums. (What happened over there? They used to be so responsive? Maybe
>>>> the
>>>> new look) The Forefront client has discovered W97M/Marker.T on one of
>>>> my
>>>> file servers. I've chosen to have it removed by FCS and it's now in a
>>>> state
>>>> of "Taking Actions....". This has been going on for a hour now and the
>>>> System Event log is filling up with FCSAM Information events every 15
>>>> or
>>>> so
>>>> seconds saying FCS is taking action. How long should I wait for this to
>>>> finish?


Similar ThreadsPosted
Forefront and System center on the same server. May 16, 2008, 5:51 am
Microsoft Forefront Security for Exchange Server February 27, 2007, 1:29 pm
JS file content found on my PC July 23, 2008, 4:02 am
virus found but not detected June 21, 2006, 6:56 pm
remove pesty virus scan not found June 12, 2006, 1:14 am
Virus Protection Not found by Security Center August 8, 2006, 9:26 am
When AV software found Virus, should I clear it first or delete it? December 26, 2006, 12:31 am
Help! RUNDLL Error loading after virus found... January 1, 2007, 2:20 pm
what virus could this be: all file associations destroyed March 11, 2006, 7:01 am
i cant delete this file or scan it with my anti-virus November 22, 2005, 3:16 pm

The site map in XML format XML site map

Contact Us | Privacy Policy