Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 2111 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Thumbs.db2 hidden files on shares virus - urgent

prolfe35

Hello

I have a cleint that has been hit with this virus. It deletes .doc .docx .xls .xlsx files from network shares and replaces them with shortcuts.

The shortcuts reference thumbs.db2 which then executes and installs the virus on another pc.

sophos does not seem to be picking this virus up

there are no tools i can see that will remove it becasue i guess its too new. 15/8/12 seems to be the earliest incarnation of this virus.

latest stinger fails to see it

does the latest sophos free tool pick it up?

has anyone else had this virus?

how did you clean it?

did you see the originating file it came from?

cheers

:28645


This thread was automatically locked due to age.
Parents
  • 0

    hi

    we got infected by it last wednesday but didnt notice until yesterday as mcafee is a pile of crap and didnt pick it up.  spoke to mcafee support, and they sent an extra.dat file through which hadnt released in the updates.  i added it in and ran the scan on the server and picked up 36000 trojans. 

    :28671
Reply
  • 0

    hi

    we got infected by it last wednesday but didnt notice until yesterday as mcafee is a pile of crap and didnt pick it up.  spoke to mcafee support, and they sent an extra.dat file through which hadnt released in the updates.  i added it in and ran the scan on the server and picked up 36000 trojans. 

    :28671
Children
No Data