Page 1 of 1 1
Topic Options
#58320 - 2001-08-17 05:31 PM HELP!!! FLCSS.EXE Virus
Fugazi Offline
Starting to like KiXtart

Registered: 2001-04-23
Posts: 142
Loc: Pace, Fl.
Is there any way I can check for a process running on NT and 95 machines. I have already implimented all of the fixes for this virus via logon script but it keeps coming back. This obviously will only working if the users are logging off and on the network.

The process I need to find is called flcss.exe.

Going Crazy in Alabama

_________________________
I haven't failed. I just found another way that did not work.

Top
#58321 - 2001-08-17 05:45 PM Re: HELP!!! FLCSS.EXE Virus
Shawn Administrator Offline
Administrator
*****

Registered: 1999-08-13
Posts: 8611
Hey Fugazi, try pulist from the reskit ...

c:\> pulist \\hostname | find /i "flcss"

-Shawn

Top
#58322 - 2001-08-17 06:08 PM Re: HELP!!! FLCSS.EXE Virus
Fugazi Offline
Starting to like KiXtart

Registered: 2001-04-23
Posts: 142
Loc: Pace, Fl.
Unfortunately our company did not find a use for the resource kit. I do not have access to those utilies.
_________________________
I haven't failed. I just found another way that did not work.

Top
#58323 - 2001-08-17 06:26 PM Re: HELP!!! FLCSS.EXE Virus
Shawn Administrator Offline
Administrator
*****

Registered: 1999-08-13
Posts: 8611
MS is slowly releasing the reskit for free - might want to try the free Win2k version from here ...

pulist ...

I haven't tried "installing" it on NT but what have you got to loose ? After all - Win32 should be Win32 eh ?

-Shawn

Top
#58324 - 2001-08-17 06:48 PM Re: HELP!!! FLCSS.EXE Virus
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
PULIST is a great utility but limited to WinNT/2K. This leaves you Win95 machines needing other solution.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#58325 - 2001-08-17 08:46 PM Re: HELP!!! FLCSS.EXE Virus
cmarti Offline
Hey THIS is FUN

Registered: 2001-02-26
Posts: 297
Loc: Little Rock, AR
If your company has SMS you can set up a query for all the machines that have the flcss.exe file on them.
Top
#58326 - 2001-08-18 02:21 AM Re: HELP!!! FLCSS.EXE Virus
Fugazi Offline
Starting to like KiXtart

Registered: 2001-04-23
Posts: 142
Loc: Pace, Fl.
For the 95 machines I wrote a script to connect to every machine on the network and see if the flcss.exe file existed in the system folder. And if it did to give me a report back with the machine name ip address and fullname of the user. Thanks for the help the pulist worked great for the NT machines.
_________________________
I haven't failed. I just found another way that did not work.

Top
#58327 - 2001-10-14 06:05 AM Re: HELP!!! FLCSS.EXE Virus
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
Dear,

Another way is to do it fast: runs deltree command.
The interesting thing of deltree is: it deletes a file regardless
of his rights.
The only problem - for all other programs also - is: it can delete
busy files.
The code can be for you local C-drive:

code:

writeprofilestring("c:\flcss.exe","dummy","dummy","dummy")
shell "%comspec% /e:1024 /c deltree /y c:\flcss.exe"


remark: to work correct deltree must find the FLCSS.EXE file
in starting directory.

Other ideas of cleaning up your system, see: cleanup.kix
from our site http://home.wanadoo.nl/scripting

Greetings.

btw: deltree is distributed with windows 95.

_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
Page 1 of 1 1


Moderator:  Glenn Barnas, NTDOC, Arend_, Jochen, Radimus, Allen, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 293 anonymous users online.
Newest Members
Sir_Barrington, batdk82, StuTheCoder, M_Moore, BeeEm
17886 Registered Users

Generated in 0.123 seconds in which 0.092 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org