W32.HLLW.Bymer <-- obnoxious little Rc5 worm

[lordugh]

Small world isnt it? a few machine at our one of our sister companies got hit by this little virus -- another one of those dnetc installing worms.. although this isnt very important, the problem is it overrided a few of my rc5 clients on those machines

I guess this a pretty wide spread virus

 

[Dutchman2000]

if it is a 'new' one (i.e. not known to d.net) you should mail all the info you have (source, logfiles regarding virus etc.) to distributed.

 

[lordugh]

Na, it not new, infact its rather well documented, it just odd recieving a virus the plants a client that you use all the time

 

[Viztech]

Didn't they set the priority higher than normal with that worm, causing troubles for the victims?

Also the bymer client loads before the 'user' portion of the start-up sequence, so it overrides many of our authorized clients.

Haven't seen you for awhile in the DC forum, Lordugh. Welcome back!

viz

 

[GT1999]

If you download from distributed's website you won't get these, right?

G|T

 

[Orange Kid]

G|T---------correct
dnet is the only place you should download the client.

 

[ViRGE]

If I ever find that Bymer guy, ugg...:|