It’s a mystery

Going to be in full investigation mode today. One of the PC’s here at work, when visiting some website, got 3 different Symantec warnings about Trojan.Trunlow:

The virus warnings said “Access Denied”

But at the same time stamp, Symantec was shutdown, and some of the password stealer .exe’s listed on that page showed up in C:/WINNT/. On the other hand, none of the registry settings were made, and there’s no evidence that it tried to actually send out any information, that I’ve found yet. The IE patch was installed, so in theory, between that being patched and Symantec catching the VBS trojan, none of it should have been allowed to run, but it was.

I suppose it’s time to go ask some questions of the user. I’m sure that won’t provide any real answers. 🙂

Similar Posts

  • Song remains the same

    I’m a little sleepy yet this morning after staying up to watch the ball game last night. My immediate response to the end of the game? 25 years after Bucky “$%^ing” Dent, a whole new generation of Red Sox fans now have Aaron “%&*#ing” Boone to break their hearts. Oh well, now that I’m officially…

  • News articles

    Phil’s got a complaint about an article he was reading. Some of it wasn’t accurate: But what really gores my ox is the awareness that, since every news article I read about something I actually know is completely, utterly, absolutely, factually, wrong, I have to assume that all the ones I read about things I…

  • And another thing..

    Oh, by the way, there’s some stuff in Newsmonster that has some real promise. Both the integration with a PDA, and the Distributed Reputation System, which is not currently available, sound pretty interesting. I haven’t tried to integrate with the PDA, because that’s going to tie up some resources and disk space that I don’t…

  • I am such a moron :)

    Here I work to add the albums and update the links on those two pages over my lunch hour and then go home to figure out that I forgot to upload those pages that I updated at work! I’ll get them up soon, promise! The real, updated Photo page is up now. Sheesh! Follow these…

  • Your government at work

    Saw this over at PocketPC Thoughts this morning. An article about the Air Marshals use of PDA’s: “The Transportation Security Administration spent $6.9 million to outfit the federal air marshal corps with voice-capable wireless handheld computers for in-flight use and then subsequently banned any voice usage because of potential interference with cockpit functions, according to…

  • Random Notes

    Beth is back blogging at a new locale. Those of you who were at Gnomedex last year know who Beth is, since she spoke. The rest of you will just have to go this year and meet her. (Thanks to Doc for the pointer.) Speaking of Gnomedex 3, I also see where Scoble’s going to…

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)