My dear god, look what Dr.Web found running in my memory

http://img301.imageshack.us/img301/5218/infected6sb.jpg

I have no idea how I got infected with this. I also didn't notice any adverse effects except for a few BSDs which the virus may or may not have been responsible for. Is this a new threat?

 

Slammer is a network worm, make sure your O.S. is fully patched.

 

It is not a new threat.

A relevant past thread is here.

 

IF you go to the F-Secure website they have a really good removal tool for the slammer that scans the momory. the link is as follows>

http://www.f-secure.com/download-purchase/tools.shtml

 

Since you already have Dr Web installed there is no need for you to download another removal tool. Just carry out a memory scan with its on-demand scanner to remove the worm.

Then make sure, as Randy says, that your OS is patched.

 

Do you maybe use Sygate firewall? Because Sygate also uses smc.exe as a process... Just a thought...

 

Yes, I use Sygate. But from reading one of the other threads posted above, it may be the case that Dr. Web is reading Sygate's log which has in fact blocked the slammer from getting in.

 

Strange thing is, AntiVir made the same finding a while back.

Have a look at this thread:- http://castlecops.com/t124000-file_found.html

 

You are right. DrWeb found in the memory Slammer's IP packet which caught Sygate. You can let it be or add smc.exe with full path in the "Location of excluded files" list of DrWeb Scanner.