js_play.a

[$teve]

hi guys,wonder if you could loan me any info on.
js_play.a
a friend of mine got infected by it,im off to work right now and could do with as mich info as pos.
thanx in advance.

 

[Rikku]

strange, there's no record at Symantec or McAffee of any virus named:
js_play
js play
js.play

 

[$teve]

thanx rikku........thats what i found in the 10 minutes free time i had before work this morning,thats why i put the job on you guys shoulders
a friend of mine phoned me to say she couldnt get into windows(2k) so i went over and had a look.everytime, windows re-started before full boot and came up with loads of errors,managed to get into safe mode and disable a few things and eventually got it to boot up,did the online scan at housecall,thats what it found js_play a trojan,its not listed in the cleaner d/b either.
but it got past norton and zonealarm and turned off true vector,which renders z/a usless,and i couldnt re-configure it .....also wouldnt let me update norton and auto protect is gone in norton also.
im gonna go and have a wrestle with it tonight,ill let you know how i do.
thanx again

 

[$teve]

btw.......housecall deleted it but like the dirty dog,it seems it left some of its droppings behind.

 

[Rikku]

yeah let me know what happens. Maybe its a new virus. You should report it maybe to Symantec?

Its strange that Norton wouldn't detect it but Housecall would!

Score one for Housecall!

 

[HKEd]

Stranger still that Trend Micro have dropped JS.Play.a from Pc-Cillin pattern files:

http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=JS_PLAY.A

 

[$teve]

been away for a few days.............but thanx for all your help and info.....very strange one indeed....but another one bites the dust.
bring on the indians