Re: Virus

Ansgar -59cobalt- Wiechers <[email protected]> Thu, 12 Oct 2006 21:13:06 +0200
Newsgroups gmane.comp.security.virus
Message-ID <[email protected]>
On 2006-10-12 boonting wrote:
> Please guide me if i post into wrong forum
> My server infected by the following virus:
> Backdoor.Agobot.AGH
> Generic.SerV.DD0DC092
> MemScan:Backdoor.Hacdef.AQ
> Backdoor.Rbot.FFF
> 
> ANy idea, how to clear it ?

Take the computer off the 'net immediately. Backup all the date on it.
Restore/reinstall the system. Restore the data after making sure it's
not infected.

http://www.microsoft.com/technet/community/columns/secmgmt/sm0504.mspx

> Any removal virus tool can recommend ?

Do NOT use removal tools. Ever.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

----------------------------------------------------------------------------
ALERT: "How a Hacker Launches a SQL Injection Attack!" - White Paper
It's as simple as placing additional SQL commands into a Web Form input box giving hackers complete access to all your backend systems!

https://download.spidynamics.com/1/ad/sql.asp?Campaign_ID=70160000000CZWl
----------------------------------------------------------------------------