[windows2000] Re: Printers Printing Crap...

  • From: "Steve Rance" <steve.rance@xxxxxxxxxxxxxxxxxxxxx>
  • To: <windows2000@xxxxxxxxxxxxx>
  • Date: Tue, 22 Oct 2002 14:10:01 +0100

I have got all the users to run the symantec fix and it didn't find the =
virus on any PCs or servers.  We run McAfee Virusscan and I have checked =
that is up to date on all PC's and servers and it is. =20

All incoming and outgoing external email is also virus checked by our =
ISP and they confirm that this working and always has been.

So it doesn't look as if we are infected.  Any ideas?

thanks,

Steve



-----Original Message-----
From: Dennis Appelboom [mailto:dennis.appelboom@xxxxxxxxxx]
Sent: 22 October 2002 11:34
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: Printers Printing Crap...



Yep, you're infected! No doubt about that.

http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbear@xxxxx=
=3D
moval.tool.html


Kind Regards,

Dennis Appelboom

________________________________
marviQ
Archangelkade 1-3
1013 BE Amsterdam
Tel: +31 (0) 20 410 7000
Fax: +31 (0) 20 410 7103
Dir: +31 (0) 20 410 7015
Cel: +31 (0) 6 45 108 184
E-mail: dennis.appelboom@xxxxxxxxxx

 -----Oorspronkelijk bericht-----
Van:    Angus Macdonald [mailto:Angus.Macdonald@xxxxxxxxxxxxxxxxxxx]=3D20
Verzonden:      dinsdag 22 oktober 2002 12:31
Aan:    windows2000@xxxxxxxxxxxxx
Onderwerp:      [windows2000] Re: Printers Printing Crap...


The bugbear virus can do that.......................

-----Original Message-----
From: Steve Rance [mailto:steve.rance@xxxxxxxxxxxxxxxxxxxxx]
Sent: 22 October 2002 11:27
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Printers Printing Crap...




We have a number of networked and locally connected shared printers on =
=3D
=3D3D
the company that are all setup on two print servers.

Since I have set them up on the second print server every morning at =
=3D3D
around 11:15 ALL the locally connected shared printers start printing =
=3D
=3D3D
page after page with each page just having a line of random (crap) =3D3D
characters on it.

Looking at the print job on the local PC, it is owned by =3D3D
"Administrator", an account we don't use.

We don't have any scheduled jobs defined on either the servers or the =
=3D
=3D3D
PCs.=3D3D20

If you turn the printer off the job disappears from the queue.

Any ideas?

-----Original Message-----
From: Nail, Larry [mailto:lnail@xxxxxx]
Sent: 21 October 2002 14:09
To: 'windows2000@xxxxxxxxxxxxx'
Subject: [windows2000] Re: Green directory on Windows 2000 Server...



They're encrypted files... Under the View Tab of Folder Actions check =
=3D
=3D3D
out
"Show encrypted or compressed NTFS files in color"

-----Original Message-----
From: Steve Rance [mailto:steve.rance@xxxxxxxxxxxxxxxxxxxxx]=3D3D20
Sent: Monday, October 21, 2002 6:52 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Green directory on Windows 2000 Server...




Interesting one....

I have come access a directory on our File server where the directory =
=3D
=3D3D
=3D3D3D and
all the files within (bar one) is in green text rather than black. =3D
=3D3D3D20

When I try to copy either the directory or any of the green files I get =
=3D
=3D3D
=3D3D3D an
"access is denied" message after about 5 minutes of it trying to copy =
=3D
=3D3D
=3D3D3D the
files.  I can copy the one black text file as I wish.

The strange thing is the permissions on the directory and files are =3D
=3D3D3D
inherited from the parent (which is Everyone - Full Control).  The green =
=3D
=3D3D
=3D3D3D
files and the black file have idenifical permissions and ownership.

The files (or drive) are not compressed, or read only.

Any idea what is going on here?

Steve

=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D=
3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D=3D
3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D=
3D
=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D=
3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D=3D
3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D=
3D
=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D=3D3D3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D
=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D
=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm



=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: