W97M/Marker.T Virus found by Forefront on file server

W97M/Marker.T Virus found by Forefront on file server
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
W97M/Marker.T Virus found by Forefront on file server Sandy Wood 07-25-2008
Posted by PA Bear [MS MVP] on July 25, 2008, 1:53 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Nevermind. I see that you had been using (TechNet) Forefront Forums:
http://forums.microsoft.com/ForeFront/Search/Search.aspx?words=&CSVUserID=MTgwMzYx&SiteID=41

Try the newsgroup?


PA Bear [MS MVP] wrote:
> Sounds like you may be confusing the Forefront newsgroup
> (microsoft.public.security.forefront) with the Forefront forums, Sandy =>
> http://forums.microsoft.com/forefront/default.aspx?siteid=41
>
> EDIT: Maybe not. Looks like those forums were moved in late May but...
>
>
> Sandy Wood wrote:
>> Yes....lately my posts have just sat there...maybe the new forum style?
>>
>>> PS: Have you tried posting to microsoft.public.security.forefront
>>> newsgroup?
>>>
>>> PA Bear [MS MVP] wrote:
>>>> Contact Forefront Support: You (or rather, your employer) is paying for
>>>> it.
>>>>
>>>> Sandy Wood wrote:
>>>>> I'm posting this here because I'm not getting any response in the
>>>>> Forefront
>>>>> forums. (What happened over there? They used to be so responsive?
>>>>> Maybe
>>>>> the
>>>>> new look) The Forefront client has discovered W97M/Marker.T on one of
>>>>> my
>>>>> file servers. I've chosen to have it removed by FCS and it's now in a
>>>>> state
>>>>> of "Taking Actions....". This has been going on for a hour now and the
>>>>> System Event log is filling up with FCSAM Information events every 15
>>>>> or
>>>>> so
>>>>> seconds saying FCS is taking action. How long should I wait for this
>>>>> to
>>>>> finish?


Posted by =?Utf-8?B?U2FuZHkgV29vZA==?= on July 25, 2008, 2:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Not yet. I'll give them a try too. Wow, alot of security forums!
--
Sandy Wood
Orange County District Attorney


"PA Bear [MS MVP]" wrote:

> Nevermind. I see that you had been using (TechNet) Forefront Forums:
>
http://forums.microsoft.com/ForeFront/Search/Search.aspx?words=&CSVUserID=MTgwMzYx&SiteID=41
>
> Try the newsgroup?
>
>
> PA Bear [MS MVP] wrote:
> > Sounds like you may be confusing the Forefront newsgroup
> > (microsoft.public.security.forefront) with the Forefront forums, Sandy =>
> > http://forums.microsoft.com/forefront/default.aspx?siteid=41
> >
> > EDIT: Maybe not. Looks like those forums were moved in late May but...
> >
> >
> > Sandy Wood wrote:
> >> Yes....lately my posts have just sat there...maybe the new forum style?
> >>
> >>> PS: Have you tried posting to microsoft.public.security.forefront
> >>> newsgroup?
> >>>
> >>> PA Bear [MS MVP] wrote:
> >>>> Contact Forefront Support: You (or rather, your employer) is paying for
> >>>> it.
> >>>>
> >>>> Sandy Wood wrote:
> >>>>> I'm posting this here because I'm not getting any response in the
> >>>>> Forefront
> >>>>> forums. (What happened over there? They used to be so responsive?
> >>>>> Maybe
> >>>>> the
> >>>>> new look) The Forefront client has discovered W97M/Marker.T on one of
> >>>>> my
> >>>>> file servers. I've chosen to have it removed by FCS and it's now in a
> >>>>> state
> >>>>> of "Taking Actions....". This has been going on for a hour now and the
> >>>>> System Event log is filling up with FCSAM Information events every 15
> >>>>> or
> >>>>> so
> >>>>> seconds saying FCS is taking action. How long should I wait for this
> >>>>> to
> >>>>> finish?
>
>

Posted by PA Bear [MS MVP] on July 25, 2008, 2:11 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I've pinged an MS contact for information on where the forums might be
located & accessed now.

Newsgroups are NOT forums.


Sandy Wood wrote:
> Not yet. I'll give them a try too. Wow, alot of security forums!
>
>> Nevermind. I see that you had been using (TechNet) Forefront Forums:
>>
http://forums.microsoft.com/ForeFront/Search/Search.aspx?words=&CSVUserID=MTgwMzYx&SiteID=41
>>
>> Try the newsgroup?
>>
>>
>> PA Bear [MS MVP] wrote:
>>> Sounds like you may be confusing the Forefront newsgroup
>>> (microsoft.public.security.forefront) with the Forefront forums, Sandy
>>> =>
>>> http://forums.microsoft.com/forefront/default.aspx?siteid=41
>>>
>>> EDIT: Maybe not. Looks like those forums were moved in late May but...
>>>
>>>
>>> Sandy Wood wrote:
>>>> Yes....lately my posts have just sat there...maybe the new forum style?
>>>>
>>>>> PS: Have you tried posting to microsoft.public.security.forefront
>>>>> newsgroup?
>>>>>
>>>>> PA Bear [MS MVP] wrote:
>>>>>> Contact Forefront Support: You (or rather, your employer) is paying
>>>>>> for
>>>>>> it.
>>>>>>
>>>>>> Sandy Wood wrote:
>>>>>>> I'm posting this here because I'm not getting any response in the
>>>>>>> Forefront
>>>>>>> forums. (What happened over there? They used to be so responsive?
>>>>>>> Maybe
>>>>>>> the
>>>>>>> new look) The Forefront client has discovered W97M/Marker.T on one
>>>>>>> of
>>>>>>> my
>>>>>>> file servers. I've chosen to have it removed by FCS and it's now in
>>>>>>> a
>>>>>>> state
>>>>>>> of "Taking Actions....". This has been going on for a hour now and
>>>>>>> the
>>>>>>> System Event log is filling up with FCSAM Information events every
>>>>>>> 15
>>>>>>> or
>>>>>>> so
>>>>>>> seconds saying FCS is taking action. How long should I wait for this
>>>>>>> to
>>>>>>> finish?


Posted by =?Utf-8?B?U2FuZHkgV29vZA==?= on July 25, 2008, 2:03 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Yes, I'm sure I am. The Forefront forum I posted my question to is at

http://forums.technet.microsoft.com/en-US/ForefrontclientMTR/threads/


--
Sandy Wood
Orange County District Attorney


"PA Bear [MS MVP]" wrote:

> Sounds like you may be confusing the Forefront newsgroup
> (microsoft.public.security.forefront) with the Forefront forums, Sandy =>
> http://forums.microsoft.com/forefront/default.aspx?siteid=41
>
> EDIT: Maybe not. Looks like those forums were moved in late May but...
>
>
> Sandy Wood wrote:
> > Yes....lately my posts have just sat there...maybe the new forum style?
> >
> >> PS: Have you tried posting to microsoft.public.security.forefront
> >> newsgroup?
> >>
> >> PA Bear [MS MVP] wrote:
> >>> Contact Forefront Support: You (or rather, your employer) is paying for
> >>> it.
> >>>
> >>> Sandy Wood wrote:
> >>>> I'm posting this here because I'm not getting any response in the
> >>>> Forefront
> >>>> forums. (What happened over there? They used to be so responsive? Maybe
> >>>> the
> >>>> new look) The Forefront client has discovered W97M/Marker.T on one of
> >>>> my
> >>>> file servers. I've chosen to have it removed by FCS and it's now in a
> >>>> state
> >>>> of "Taking Actions....". This has been going on for a hour now and the
> >>>> System Event log is filling up with FCSAM Information events every 15
> >>>> or
> >>>> so
> >>>> seconds saying FCS is taking action. How long should I wait for this to
> >>>> finish?
>
>

Posted by =?Utf-8?B?U2FuZHkgV29vZA==?= on July 25, 2008, 1:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Yes, but only the server-side. They won't support our client
questions......have to love it.....
--
Sandy Wood
Orange County District Attorney


"PA Bear [MS MVP]" wrote:

> Contact Forefront Support: You (or rather, your employer) is paying for it.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
> Sandy Wood wrote:
> > I'm posting this here because I'm not getting any response in the
> > Forefront
> > forums. (What happened over there? They used to be so responsive? Maybe
> > the
> > new look) The Forefront client has discovered W97M/Marker.T on one of my
> > file servers. I've chosen to have it removed by FCS and it's now in a
> > state
> > of "Taking Actions....". This has been going on for a hour now and the
> > System Event log is filling up with FCSAM Information events every 15 or
> > so
> > seconds saying FCS is taking action. How long should I wait for this to
> > finish?
>
>

Similar ThreadsPosted
Forefront and System center on the same server. May 16, 2008, 5:51 am
Microsoft Forefront Security for Exchange Server February 27, 2007, 1:29 pm
JS file content found on my PC July 23, 2008, 4:02 am
virus found but not detected June 21, 2006, 6:56 pm
remove pesty virus scan not found June 12, 2006, 1:14 am
Virus Protection Not found by Security Center August 8, 2006, 9:26 am
When AV software found Virus, should I clear it first or delete it? December 26, 2006, 12:31 am
Help! RUNDLL Error loading after virus found... January 1, 2007, 2:20 pm
what virus could this be: all file associations destroyed March 11, 2006, 7:01 am
i cant delete this file or scan it with my anti-virus November 22, 2005, 3:16 pm

The site map in XML format XML site map

Contact Us | Privacy Policy