Discussion Locked

Intormation on a Virus

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I need the full information related to the JS/Seeker.U virus. The description that I received from Norton and Mcafee are of no help

I am getting different results than what is listed and I need to know if this what my virus is supposed to do or not.

I possibly might have someones job on the line if I cannot explain this any further in my investigation report.

5 replies

by still_learning

You seem certain that the virus is JS/Seeker.U, yet the description of the problem does not match your symptoms. It could be a variant of the JS/Seeker or a different but similar virus. I assume that since you were able to detect the virus, you havea subscription to an anti-virus program. I would recommend that you forward the virus on to them and have them identify it for you. Hope this helps.

by doug-clark

After doing some IE6 update downloads I put 2+2 together and found out that we have some "holes" in the security that need to be taken care of.

by joseph moore

Well, you have already seen this from SARC, but just to be sure, here is a link to searching their virus encyclopedia for "seeker":
http://search.symantec.com/custom/us/query.html?col=&ht=0&qp=url%3A/avcenter/venc/data+url%3A/avcenter/venc/dyn/,+url%3A/avcenter/security/+url%3A/avcenter/sirc/&qs=&qc=&pw=100%25&ws=0&la=en&si=0&fs=&qt=seeker
( I know, it is a long url that will contain many spaces; please remove the spaces)

Next, I would go through the listed results of the different Seeker viruses (the files they create; the Registry changes they make) and make sure you have these modifications, just to verify exactly which Seeker variant you have.

Last, if you can't find a match, please post what you are seeing the virus do.

hope this helps

by doug-clark

After doing some IE6 update downloads I put 2+2 together and found out that we have some "holes" in the security that need to be taken care of.

This discussion is closed to new replies.