The virus the user had in my case was the netsky.b@mm. It apparently tries to place itself in any folder with the word share or sharing in it. That wasy it can be sent out via any P2P programs.
Since we don't allow any of those here, it placed itself in any folder named shared on the hard drive. Since a lot of software has shared components, like office, that's where the 1173 files came from. It was mainly the same 20 or so files in multiple folders.
The fact that this was a homicide detective made the situation even worse (or funnier from my standpoint). She should have known better than to try and open an e-mail attachment from someone she didn't know.
I tell ya, the cops are the worst problem we have in IT. Makes ya wonder how crimes ever get solved.
__________________
I reject your reality, and substitute my own
-- Adam Savage
|