W32/Lovegate Virus and NETSERVICES.EXE 1

[n0spin79]

Hello and thanx in advance,

We are using CAI InoculateIT version 6.0.96 with the latest signature files (downloaded daily), on a Novell network.

One of the Windows 2000 PCs on our network receives a warning message daily during startup (after the desktop comes up). The message states that the file NETSERVICES.EXE is infected with W32/Lovegate. It then states that it cannot clean the file,and renames it.

We have deleted the file, but it comes back along with the message at startup. We have run the FixLovegate.reg utility from CAI but the file persists.

Has anyone else seen this behavior, or have any idea how to resolve it. Any and all suggestions will be appreciated.

Thanks again.

 

[SESaskDFC]

Howdy:

Netservices.exe is part of the virii..

Go to the following url for a removal tool and instructions..

http://www.symantec.com/avcenter/venc/data/w32.hllw.lovgate.removal.tool.html

Murray

 

[n0spin79]

Thanks for the assistance. Not sure why, but the Netservices.exe messages were appearing on a different PC from the one which was actually infected. Once the infected PC was cleaned, the administrator's PC stopped receiving the messages. Thanks again.

 

[SESaskDFC]

Howdy:

Not a problem..

Murray