-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bogusław Brandys wrote: > BogusBaw Brandys wrote: > >>>BogusBaw Brandys wrote: >>> >>> >>>>>Klerman Gutierrez wrote: >>>>> >>>>> >>>>> >>>>>>>Hello, >>>>>>>Recently CLAMWIN detected that this machine has a program named >>>>>>>SCardCint.exe, which is recognized as a worm. >>>>>>>It is in the .clamwin/quarantine folder yet, but I can't remove it >>>>>> >>>>>>>from the system. >>>>>> >>>>>> >>>>>>>Neither stopping the process, nor deleting the file works. Where can I >>>>>>>find information about removing this worm ?. >>>>>>>TVMIA, >>>>>>>Klerman >>>>>>>_______________________________________________ >>>>>>>http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32 >>>>>>> >>>>>>> >>>>> >>>>> >>>>> >>>>>Just a guess : >>>>> >>>>>W32/Codbot-K [Sophos] >>>>> >>>>>if this is NT/XP OS : >>>>> >>>>>search for SCardClnt service and disable it >>>>> >>>>>remove registry keys: >>>>> >>>>>HKEY_LOCAL_MACHINE\SYSTEM\ CurrentControlSet\Services\ SCardClnt >>>>> >>>>>and bear in mind that this list is related to ClamAV and not worms ;-) >>>>> >>>>>In future look into alt.comp.anti-virus group. >>> >>> >>> >>>alt.comp.anti-virus is a good choice also > > > Sorry, I mean : alt.comp.virus
Also, check twice before removing any system file or registry settings. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCfI8BtuGICzHOh+YRAhZ8AJ9OeCBfyub3IEn28j6y5JCnIR9OzwCfVOF5 8L+Cxlj1ucEYvvsLhHhXoS8= =crOM -----END PGP SIGNATURE----- _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32
