zcrew irc bot.

[karmic]

Seems theres a new virus on the market, and once again, my client is infected... zcrew!!!

Need some help if there are any hackers (or wannabees?) in the forum. I can and have gotten rid of the virus but I need to know where this is coming from. i'm positive it's not coming in thru the intranet, i've done a manual sweep of all pc's already (registry, sysedit, and known folder locations as well as a trojan scanner). We are running norton corporate 8.0 right across the board but norton is missing these virii until the server is infected and a manual scan is done... and it's only the server!!!

This client is connected via VPN T1 trunk to head office in another city. Basically, i'm thinking these virii are skipping in across the vpn from the head office (i've seen this at other sites and norton missed it as well). This is a third infection in the past 2 weeks, and the last one resulted in a severe hack job.

If anyone can give me any ideas on how to scan systems on another network (thru vpn) and soon I would greatly appreciate it.

Thanks.

~ The day I think I know it all, i'm changing careers ~

 

[karmic]

I've written symantec about this problem but I would love to know if anyone else has this problem...

Thanks ~ The day I think I know it all, i'm changing careers ~