My dear god, look what Dr.Web found running in my memory

Discussion in 'other anti-virus software' started by Pericles, Aug 5, 2005.

Thread Status:
Not open for further replies.
  1. Pericles

    Pericles Registered Member

    Joined:
    Jul 19, 2004
    Posts:
    17
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,751
    Location:
    Texas
  3. Randy_Bell

    Randy_Bell Registered Member

    Joined:
    May 24, 2002
    Posts:
    3,004
    Location:
    Santa Clara, CA
    Slammer is a network worm, make sure your O.S. is fully patched. :)
     
  4. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,010
    Location:
    Christchurch, UK
    It is not a new threat.

    A relevant past thread is here.
     
  5. Tomm772

    Tomm772 Guest

  6. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,010
    Location:
    Christchurch, UK
    Since you already have Dr Web installed there is no need for you to download another removal tool. Just carry out a memory scan with its on-demand scanner to remove the worm.

    Then make sure, as Randy says, that your OS is patched.
     
  7. RejZoR

    RejZoR Registered Member

    Joined:
    May 31, 2004
    Posts:
    6,426
    Do you maybe use Sygate firewall? Because Sygate also uses smc.exe as a process... Just a thought...
     
  8. Pericles

    Pericles Registered Member

    Joined:
    Jul 19, 2004
    Posts:
    17
    Yes, I use Sygate. But from reading one of the other threads posted above, it may be the case that Dr. Web is reading Sygate's log which has in fact blocked the slammer from getting in.
     
  9. TopperID

    TopperID Registered Member

    Joined:
    Oct 1, 2004
    Posts:
    1,527
    Location:
    London
  10. AndreyKa

    AndreyKa Registered Member

    Joined:
    Feb 25, 2005
    Posts:
    93
    Location:
    Russia
    You are right. DrWeb found in the memory Slammer's IP packet which caught Sygate. You can let it be or add smc.exe with full path in the "Location of excluded files" list of DrWeb Scanner.
     
Loading...
Thread Status:
Not open for further replies.