RE: Virus problem: Hezhi

["JAVIER OTERO" <jotero () SMARTEKH com>]

The problem is detect the source, this virus is in memory and start to infect the files in shared folders.
You can run any AV, clean, clean and clean again, the net has about 1,000 pc, if one is infected this happen again.
We can not eliminate all shared folders, there are some w95 and w98 machines.

Javier Otero 
Grupo Smartekh 
Antivirus Expertos 
Bussiness Continuity 
Inftegrity 
5243-4782 al 84 Ext.300
México, D.F. 



-----Mensaje original-----
De: DS [mailto:dsardina () si rr com]
Enviado el: Miércoles, 09 de Abril de 2003 01:04 p.m.
Para: JAVIER OTERO; security-basics () securityfocus com
Asunto: RE: Virus problem: Hezhi


--
Delete all the files detected as W32.Hezhi.

--
Why don't you install a AV product to remove it or use an free online
scanner.
--

DS.



-----Original Message-----
From: JAVIER OTERO [mailto:jotero () SMARTEKH com] 
Sent: Tuesday, April 08, 2003 2:30 PM
To: security-basics () securityfocus com
Subject: Virus problem: Hezhi


Hezhi is causing problems, I have searched google and other sources like
symantec, nai, ca, trend, nod32, .... and I have found NO real solution.

This is my info:
memory resident
uses shared folders
about one year old

Any commnet I will apreciate very much.

Javier Otero 
Grupo Smartekh 
Bussiness Continuity 
Inftegrity 
5243-4782 al 84 Ext.300
México, D.F. 


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.467 / Virus Database: 266 - Release Date: 01/04/2003
 

-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection. http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free
technical support. Stop SPAM before it stops you.
-------------------------------------------------------------------


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.467 / Virus Database: 266 - Release Date: 01/04/2003
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.467 / Virus Database: 266 - Release Date: 01/04/2003
 

-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------