tcpdump analysis help!

[Eric Anderson]

karan Gupta wrote:
> Is 10.0.152.48 effected with a virus?

Yes - look at the processes running, and look for scrgrd.exe.  Kill it, remove 
ALL related registry entries, then do this:

cd c:\windows\system32
attrib -r -s -a -h scrgrd.exe
del scrgrd.exe



-- 
------------------------------------------------------------------
Eric Anderson     Sr. Systems Administrator    Centaur Technology
Talk sense to a fool and he calls you foolish.
------------------------------------------------------------------