Forum Moderators: phranque

Message Too Old, No Replies

New Trojan Virus

New Trojan Virus

         

guardian

5:12 pm on Nov 19, 2001 (gmt 0)

10+ Year Member



I saw a new Trojan Virus this morning (11/19/01 est)
it shows up as RootCMD and seems to infect the root.exe file in the MSADC directory. My anti-virus caught it but my IDS didn't know about it. McAfee is working on it. Has anyone else seen this?

toadhall

8:01 pm on Nov 19, 2001 (gmt 0)

10+ Year Member



More info:
[vil.mcafee.com...]
Risk: Low
"...most commonly seen as a result of a W32/CodeRed.c.worm infection. "

guardian

8:10 pm on Nov 19, 2001 (gmt 0)

10+ Year Member



Thanks...I found that after I posted. Couldn't find it earlier. It was new to me and it's coded as the .ida overflow error on my IDS from Cisco.