-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bogusław Brandys wrote: > BogusBaw Brandys wrote: > >>>Klerman Gutierrez wrote: >>> >>> >>>>>Hello, >>>>>Recently CLAMWIN detected that this machine has a program named >>>>>SCardCint.exe, which is recognized as a worm. >>>>>It is in the .clamwin/quarantine folder yet, but I can't remove it >>>> >>>>>from the system. >>>> >>>>>Neither stopping the process, nor deleting the file works. Where can I >>>>>find information about removing this worm ?. >>>>>TVMIA, >>>>>Klerman >>>>>_______________________________________________ >>>>>http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32 >>>>> >>>>> >>> >>> >>> >>>Just a guess : >>> >>>W32/Codbot-K [Sophos] >>> >>>if this is NT/XP OS : >>> >>>search for SCardClnt service and disable it >>> >>>remove registry keys: >>> >>>HKEY_LOCAL_MACHINE\SYSTEM\ CurrentControlSet\Services\ SCardClnt >>> >>>and bear in mind that this list is related to ClamAV and not worms ;-) >>> >>>In future look into alt.comp.anti-virus group. > > > > alt.comp.anti-virus is a good choice also
Sorry, I mean : alt.comp.virus _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCfI2BtuGICzHOh+YRAg7QAJ0Wvl6fBk0Kc3ztUYu8aEoHqHDESgCffhwU wgZq5ptJjwcrEMzd0XVfQkI= =AxmL -----END PGP SIGNATURE----- _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32
