Mark Haney wrote:
On Tue, 2004-09-21 at 16:59, Si Jones wrote:
With you saying the file is sndmon32.exe, it seems like a windows
program and without trying to be funny but this is a Fedora Linux list.
I give up windows a while ago and don't really care what virus's are
speading on that platform!!!
So sorry to be negative but I think you will find that everyone else
won't care either!
Regards,
Simon Jones
Actually, I fully expected to get at least one of these, from the list.
And here's my stock answer. Yes, I am well aware it's a linux list.
I'm also well aware that _some_ people don't give a rat's hiney what
happens in the Windows world. HOWEVER, there are a lot (and I'm one of
them) network and system administrators who use linux at work (ditto) as
well as maintain a network of tens if not hundreds of Windows boxes.
This is kind of like saying, I'm left handed and if I get gangrene in my
right hand who cares? It's not my left and I only use my left.
And if you don't really care what happens in the Windows world and don't
have anything useful to add to my question, then don't reply to it.
Now, if someone else would like to add something, I'd be grateful (and
the ISC reply was a good start, thanks for that.), and if not, well, I
thought I'd ask.
Mark,
I believe it is a trojan, but I'm not certain where it came from (e.g.
how it got on the system...if you have IE or Outlook or IM, beware!)
sndmon.exe is a part of the Norton Firewall suite. sndmon32.exe is not,
but it's typical of trojan writers to make similar looking names. Kill
the program and check your registry for any reference to it. If you
find one, delete that key.
To all of the people who jumped down this fellow's throat:
Yes, the item was off-topic. Yes, it doesn't necessarily go with Fedora
stuff, but face it...there are a lot of smart cookies on this list. The
chap was looking for help and this is where he went. He did note that
the subject was off-topic and even stated it was really off-list in his
initial posting. We should be flattered that he came here for help. So
get over it and drop the flame war, gang. Jeeze!
----------------------------------------------------------------------
- Rick Stevens, Senior Systems Engineer rstevens@xxxxxxxxxxxxxxx -
- VitalStream, Inc. http://www.vitalstream.com -
- -
- Change is inevitable, except from a vending machine. -
----------------------------------------------------------------------
