bryanmac
09-22-2002, 11:24 PM
hey all,
i'm having a bit of virus issue at work that i can't seem to find info on. i've noticed on several XP machines the following entry in Internet Connections under the heading "Internet Gateways":
AOL Internet Gateway on <users_name>
(it actually says a specfic users name but i don't want to publish it).
the name is the same on all the machine's. when i tracked down the specific user and scanned her machine for viruses i found the Troj/Momma-B virus present as well as programs like downloadware and medialoads. i removed the virus and the crapware programs associated with it. i've done some research on the virus and have found that it apparently installs an IRC client on infected machines allowing backdoor entry but nothing about installing an Internet Gateway entry. does anyone have experience with this virus? i can't seem to remove this Internet Connections entry from these other machines (allows me to disable but not delete). has anyone seen this or something similar to this behavior before? this virus is causing havoc on my network so any help would be appreciated.
i'm having a bit of virus issue at work that i can't seem to find info on. i've noticed on several XP machines the following entry in Internet Connections under the heading "Internet Gateways":
AOL Internet Gateway on <users_name>
(it actually says a specfic users name but i don't want to publish it).
the name is the same on all the machine's. when i tracked down the specific user and scanned her machine for viruses i found the Troj/Momma-B virus present as well as programs like downloadware and medialoads. i removed the virus and the crapware programs associated with it. i've done some research on the virus and have found that it apparently installs an IRC client on infected machines allowing backdoor entry but nothing about installing an Internet Gateway entry. does anyone have experience with this virus? i can't seem to remove this Internet Connections entry from these other machines (allows me to disable but not delete). has anyone seen this or something similar to this behavior before? this virus is causing havoc on my network so any help would be appreciated.