concept virus

[Burak DAYIOGLU <dayioglu () metu edu tr>]

hi,
One thing that I have had not seen mentioned frequently
is that the virus shares c:\ directory as "c$". As the
guest user is given administrator priviledges, this might
be important.

I'm unsure about whether the virus uses Windows shares to
download copies onto victims or not.

I hope this reminder helps some.

regards.
-- 
Burak DAYIOGLU
Phone: +90 312 2103379   Fax: +90 312 2103333
       http://www.dayioglu.net

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com