New virus that can open port 4031 to this ip 212.174.200.99
November 10, 2009
From 11-07-2009, There are a new virus that don't be identify by the most antivirus.
This virus can open connections to the port 4031 with the ip 212.174.200.99
I was having problems whith this, First we block the virus connections with a static route like this:
route add -p 212.174.200.0 MASK 255.255.255.0 'ip_lan_no_gw'
Where ip_lan_no_gw must be an ip address from you lan that don't have it. Never the ip of the router.
Today I was cleaned the virus whith Prevx Antivirus..... http://www.prevx.com files that contain the virus is:
The
c:\windows\system32\drivers\aecv.sys
c:\windows\system32\drivers\atswpdrvi.sys
Thanks to prevx ....
Add A Comment