SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?


To: mr.mark who wrote (34662)6/7/2003 9:47:57 AM
From: Rick Faurot  Respond to of 110613
 
So far I have found none of the changes that Symantec indicated are associated with Lolok.B. The registry change did not happen, the mod to mIRC was not found by search, Spybot found nothing that looks like the changes Symantec indicates. NAV does have one file iun6002.exe in quarantine and that seems to be the extent of my problem from this attack. I did a google search for iun6002.exe to see what it does, but got no results.

For now I am leaving mIRC uninstalled and taken away its permission from ZA as Symantec says the trojan phones home via mIRC.

If you get any more news about Lolok.B, I'd appreciate seeing it.

Thanks again for the assistance.