Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

xpssl.exe worm file


  • Please log in to reply
2 replies to this topic

#1 larryhultberg

larryhultberg

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:36 PM

Posted 17 May 2005 - 08:16 PM

any experience or help with the xpssl.exe worm that comes through the IM programs ?
My Trend micro was unsuccessful in quanrantine and now it's loose

BC AdBot (Login to Remove)

 


#2 gunner

gunner

  • Members
  • 337 posts
  • OFFLINE
  •  
  • Location:Pensacola, Florida
  • Local time:02:36 PM

Posted 20 May 2005 - 06:25 PM

Name: IECheck
Filename: xpssl.exe
Description: Added by the W32/Tirbot-E worm. This infection sits on an IRC channel and typically can harvest information from the system registry, perform denial of service (DDoS) attacks, serve as a proxy server, upload/download and execute files, report file system information, detect security software or list processes upon command.
File Location: %System%
Startup Type: This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.
Note: %System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP.
Removal Instructions: How to remove a Trojan, Virus, Worm, or other Malware
Spike's advice: Backup your data routinely.

#3 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:01:36 PM

Posted 21 May 2005 - 08:21 AM

If you haven't already done so, download, update and run the Microsoft Anti-malware beta:

Microsoft Antimalware Beta: http://www.microsoft.com/athome/security/s...re/default.mspx

I also recommend the following web based scanners:
Web based online Antivirus and anti-malware scans:

Panda Activescan (IE only)
http://www.pandasoftware.com/activescan/co...n_principal.htm

Trend Micro antivirus and malware scan:
http://housecall-beta.trendmicro.com/en/st...orp.asp?id=scan

Etrust Anti-virus web scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Kaspersky Anti-Virus Web Scanner
http://www.kaspersky.com/service?chapter=161739400#betatest




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users