Re: Stubborn mirc worm

"R L Van Valer (Van)" <rlvanvaler@att.net> wrote:

> Thank you both very much, Art and Zvi. Now I suspect all I need
> additional is a little luck!

No -- you will _still_ need to disable any inappropriate network shares
and/or any unduly weak share passwords.

The above should allow you to find and remove the existing malware on
your system, but does nothing to address the issues of:

1. How any of it got there?

2. Why there is (or has been) so much different malware on your PC?

As already stated in other messages in this thread, most (if not all)
of the malware you named is known to self-distribute itself via a
combination of Windows networking and weak (and in some I think _just_
through null) passwords.

So, don't pat yourself on the back at a job well-done if you all you've
acheived is getting all that malware off your machine. You then have
to find and fix all the weak networking options on your PC, and then
thoroughly check that some scumbag who either compromised your security
(or who found it already compromised by one of the backdoors associated
with that impressive list of malware) has not added further "backdoors"
such as additional admin-equiv user accounts, enabled the Guest user
and added it to the admin group, etc, etc, etc...


--
Nick FitzGerald