[WEB4LIB] Virus and Centurion Guard Question

[Joshua Ellsworth]

It looks like randex.gen propagates using network shares and random IP
address attacks, among other means.  This would allow it to show up on
the computer with the Centurion Guard after bootup and write itself to
the temporary space. With a Centurion Guard, you can make all sorts of
changes, but they are "rolled back" upon reboot.  If you had rebooted,
the virus would have been gone.  

Virii such as randex.gen are the reason why a Centurion Guard alone is
not adequate virus protection.  

I hope that this helps.

Joshua Ellsworth
IT Manager
Amherst County Public Library
Amherst, VA

-----Original Message-----
From: web4lib at webjunction.org
[mailto:web4lib at webjunction.org] On Behalf Of Connie Hudson
Sent: Wednesday, June 16, 2004 11:25 AM
To: Multiple recipients of list
Subject: [WEB4LIB] Virus and Centurion Guard Question


We have had Centurion Guard installed on our WinNT public computers for
about 3 years and I have never had a virus infection until today. Our
antivirus software quarantined it, so it didn't cause any harm, but I
thought Centurion Guard would get rid of any viruses on a reboot.

The virus is Randex.gen and was detected on three of the public
computers. Does anyone have any thoughts on why Centurion Guard did not
drop the virus after the reboot.

Thanks for any insight you can offer.

Connie


Connie Hudson, Systems Coordinator connie.hudson at flower-mound.com Flower
Mound Public Library
3030 Broadmoor  Flower Mound, TX   75022
972-874-6161  fax 972-874-6466