Possibly. Given it's an exe-to-exe infector, from the little I can find on the inertnet, I guessed from the fact more than one machine had it that it's moving via a server, so when I asked them, it turns out they're using Microsoft Workgroups and are attached to a Hyperdata server. So maybe a scanner on one machine is spotting it on another, where it can't clean it, or something. Don't see how it'd be able to move the file to quarantine if it doesn't have write permission though. Maybe they just installed the scanner so it runs with insufficient permissions. They're all mad in Chemistry - it's the solvents.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
no subject
no subject
Maybe they just installed the scanner so it runs with insufficient permissions. They're all mad in Chemistry - it's the solvents.