W32/Pinif.a Does anyone know how it gets through?

[mhauser1]

Does anyone know how the W32/pinif.a virus got through our security (Firewall, eTrust AV)? we fixed all infected files but how did this thing get into our system. I've searched the NEt and no one seems to know how it gets delivered.

Thanks

M

 

[vop]

The next best guess might be 'ActiveX' or driveby download delvery thru an executable script contained on a webpage. HTML based email may also often be a delivery mechanism for ActiveX or scripting payloads.

See ActiveX discussion here:

http://www.newbie.org/common/turnoff_activex.html

In cases of recurring problems it is reasonable to severely restrict (disable) ActiveX content, consider changinge browsers, and/or to filter HTML email into text only content.

What about a screensaver download as a possible virus source?

 

[mhauser1]

Vop thanks for the ideas, I really need to question the user of the laptop that had the most infections on it