It’s a mystery

Going to be in full investigation mode today. One of the PC’s here at work, when visiting some website, got 3 different Symantec warnings about Trojan.Trunlow:

The virus warnings said “Access Denied”

But at the same time stamp, Symantec was shutdown, and some of the password stealer .exe’s listed on that page showed up in C:/WINNT/. On the other hand, none of the registry settings were made, and there’s no evidence that it tried to actually send out any information, that I’ve found yet. The IE patch was installed, so in theory, between that being patched and Symantec catching the VBS trojan, none of it should have been allowed to run, but it was.

I suppose it’s time to go ask some questions of the user. I’m sure that won’t provide any real answers. 🙂

Similar Posts

  • New Toys!

    Well Blogger Pro is working for me now. Can’t wait to do some playing with it! Perhaps I’ll even setup a mail list so you can get my new posts emailed to you or something. I like the item title option as well. Now I can give some posts titles..cool. I need the spellcheck! I…

  • Don’t you hate that..

    It’s one thing to have to help people around the office with their PC issues, it’s quite another when it’s your PC having the problems. My news aggregator of choice is having some technical difficulties. Something in one of the feeds I’m subscribed to is making it crash on opening and the only fix is…

  • More coffee please…

    Angela and I had some entertainment options last night. We could have caught Black 47 at Byrne’s Pub, or we could have used free passes to see a sneak preview of Murder by Numbers, the new Sandra Bullock flick. Seeing as I had to write a whopping check to the IRS this month, we went…

  • In the news today

    Library Filtering Law overturned. -the thing missing from this story, of course, is that filters don’t work and block quite a bit of legitimate information from being available to library patrons. Let’s hope the Supreme Court agrees with this ruling. Look, someone who gets it on airport security! I was beginning to think that no…

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)