Group: hr.ponuda.softver · Group Profile · Search for Gh0st in hr.ponuda.softver
Author: D|I|S|K|O|N|T 2/0/0/7
Date: Feb 20, 2008 00:10
Jimmy, One of the volumes on our NW6.5 is infected. There is a file called "gh0st.exe" which cannot be removed manually under explorer. ConsoleOne shows that the file is flagged system and delete-inhibit... and the attributes cannot be removed and thus the file cannot be deleted. Any clues? Try filer.exe in sys:public - Anders Gustafsson, Engineer, CNE6, ASE NSC Volunteer
|