Spyware Beta - SMSC.EXE

[Curt]

After I installed AntiSpyware Beta, I received the message
WINDOWS\SYSTEM32\SMSC.EXE is attempting to install itself
do you wish to block it. I replied yes and the thing
keeps re-installing itself. I also noticed that after it
is running I can't use the system configuration
program...the sysconfig starts and runs for about 5
seconds and then just ends. If I am real quick, I can
uncheck the box that starts smsc.exe...but I believe a
startup registry key just re-installs it. I know I can
rename the file and my system comes up and tells me during
boot up that windows can not find smsc.exe. I click okay
and everything seems to run okay. Before I remove the
registry key that is re-installing it, I'd like to know if
anybody out there knows what this program is? I have
listed the properties but they don't tell me who the
creator of the program is. Any suggestions? I even tried
to list the program to see if there was anything to give
me a hind...no luck.

 

[Guest]

It is a worm that exploits a vulnerability in lsass.exe.
If you have your OS completely updated, you won't have
the problem any more.

You can read more about it here:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?
VName=WORM_SDBOT.FO

Install all of your critical updates, run your Anti-Virus
to make sure it is off of your system.

 

[Curt]

-----Original Message-----
It is a worm that exploits a vulnerability in lsass.exe.
If you have your OS completely updated, you won't have
the problem any more.

You can read more about it here:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?
VName=WORM_SDBOT.FO

Install all of your critical updates, run your Anti-Virus
to make sure it is off of your system.


.
Thanks for the update, I appreciate it. This worm is a

pesky little guy that the new Beta SpyWare doesn't fix
properly or correctly identify.