Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
How to Identify Source of Lovgate
Name: Sdmpmc Date: June 23, 2005 at 07:35:39 Pacific OS: w2k Server CPU/Ram: Intel, 1 GB
Comment:
We are running Symantec real-time protection on a W2k server. We keep getting messages that it has identified the threat W32.Lovgate.X@mm in a particular file in the WINNT/TEMP folder.
We have scanned the server and the virus does not exist anywhere on the server.
We assume it is coming from some other machine on our network.
Does anyone know of any tool which I can use to help determine which machine is trying to write the virus to my server?
_________________________ The internet is no longer a toy, it's a COMBAT ZONE!
0
Response Number 2
Name: Paul Fahrenbach Date: June 23, 2005 at 18:16:35 Pacific
Reply:
You could delect you Temp folder and see if Norton still see it. or run a program like Cclean.
0
Response Number 3
Name: FragrantToes Date: June 24, 2005 at 10:08:18 Pacific
Reply:
Also, don't be too quick to proclaim your server clean. Often the initial part on an infection will just be a downloader file which may be missed by your antivirus and keeps retrieving the virus from the web... if your server has such a file and it could result in what you are seeing. Your only way of tracking it down would be to check through running processes and startup locations.
Summary: recently, I recieved NDr...I don't know how to get rid of this problem...the only problem is that a window constantly pops-up on my browser stating (An error has occurred in the script on this page) a...
Summary: This is a new question. I am confident I know how to get rid of the Seek-Seek virus, my question is this: Is the code HKEY_CLASSES_ROOT\Interface\{57A0E747-3863-4D20-A811-950C84F1DB9B} a valid virus...
0 
