Friday, January 23, 2009

Analyzing your OSCE virus log for worm_downad





Click for larger image


If you look at your OSCE virus log and found 'x' under column Infected file. That indicates the machine has not been patched with MS08-067.

Further explanation:

"If there is WORM_DOWNAD detection in IE temp folder + WORM_DOWAD detection in system folder for the file named x and real time scan able to delete the file means that malware is Propagatng via MS08‐067 and machines are still not patched with MS08‐067."

Do you still fighting against this worm? Good Luck! I hope this information helps.

No comments: