IT - Virus Alert

[mykalberta]

For anyone in IT, be cautious of a possible new virus.

Trend Name: IRC_MALINGSIA.B

Converts word files into read only EXE files 688KB in size.

Trend doesnt detect it as a virus until you actually double click on the Word Document.

We are still working on a patch fix/solution.

[Bobblehead]

So is it a Word macro, or how does it broadcast?

[Superflyer]

Do you any kind of link on more info?

[mykalberta]

no link, we just found it on one of our locations this morning.

It has jumped servers, it hasnt jumped ip subnet yet which is good because one hop away is where 5 file servers, 4 app servers, and 3 OCS servers lie .

Not sure what it does, except cause me who is in charge of the backup situation here alot of headache cause now I have to restore all the *.doc files on 3 servers. But I cannot restore them yet because the problem hasnt been resolved yet.

McAfee does detect the virgin file as a virus, but when you go to fix it deletes it, so it does a better job then Trend. SuperAntiSpyware Pro also doesnt find anything.

Also, I double clicked on one of the files in a XPSP3 VM. After 2 hours it has converted half of the .doc files to exe files, doesnt seem to do anything else though. Not noticing any strange processes running either.