virus attacks: our experience
15 years 10 months ago #28817
by sose
sose
Network Engineer
analysethis.co/index.php/forum/index
virus attacks: our experience was created by sose
Chances are that any being in the universe who has ever clicked a mouse have encountered viruses, worm, trojans, logic bomb etc. those that replicate document, those that swallow bandwidth, those that restart systems, those that freezes systems etc
please relate your experience about viruses and what you did to counter them.
This trend I dedicate to all virus victims that have lost data from virus attacks. Oh lord, protect us from the evil of the redcode worms , low and high level language virus.
please relate your experience about viruses and what you did to counter them.
This trend I dedicate to all virus victims that have lost data from virus attacks. Oh lord, protect us from the evil of the redcode worms , low and high level language virus.
sose
Network Engineer
analysethis.co/index.php/forum/index
15 years 10 months ago #28825
by S0lo
Studying CCNP...
Ammar Muqaddas
Forum Moderator
www.firewall.cx
Replied by S0lo on topic Re: virus attacks: our experience
This one was one of the worst I had to deal with:
www.firewall.cx/ftopict-5113.html
Another one was something similar to blaster. It was way back in 2002-2003. We had Win2000 on most of our machines in one of our student labs at University, almost all of them got hit. Newly formated PCs just get hit the moment you plug the network cable in. There was no firewall in Win2000 remember. So we had to make sure we install a firewall or patch every thing before even accessing the net.
Another one was something similar to blaster. It was way back in 2002-2003. We had Win2000 on most of our machines in one of our student labs at University, almost all of them got hit. Newly formated PCs just get hit the moment you plug the network cable in. There was no firewall in Win2000 remember. So we had to make sure we install a firewall or patch every thing before even accessing the net.
Studying CCNP...
Ammar Muqaddas
Forum Moderator
www.firewall.cx
15 years 10 months ago #28829
by Smurf
Yup, we were in the same boat. People were removing the viruses and then putting the PC's back on the network, getting them infected. We looked after schools in our Boro and we ended up disconnecting infected schools (we were blocking the specific ports on the Cisco Routers and then monitoring traffic counts hitting the routers, if they were increasing substantially, then we would disconnect the LAN interfaces on the routers until they did a full clean up operation).
Our instructions where to simply go round every computer, patch them and then remove the virus. It was a ball ache really.
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: virus attacks: our experience
This one was one of the worst I had to deal with: www.firewall.cx/ftopict-5113.html
Another one was something similar to blaster. It was way back in 2002-2003. We had Win2000 on most of our machines in one of our student labs at University, almost all of them got hit. Newly formated PCs just get hit the moment you plug the network cable in. There was no firewall in Win2000 remember. So we had to make sure we install a firewall or patch every thing before even accessing the net.
Yup, we were in the same boat. People were removing the viruses and then putting the PC's back on the network, getting them infected. We looked after schools in our Boro and we ended up disconnecting infected schools (we were blocking the specific ports on the Cisco Routers and then monitoring traffic counts hitting the routers, if they were increasing substantially, then we would disconnect the LAN interfaces on the routers until they did a full clean up operation).
Our instructions where to simply go round every computer, patch them and then remove the virus. It was a ball ache really.
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
15 years 10 months ago #28836
by sose
sose
Network Engineer
analysethis.co/index.php/forum/index
Replied by sose on topic Re: virus attacks: our experience
A virus I dealt with in 2004 attached itself to win help file in the system folder. I manually traced the file by viewing hidden file and you will see two win help folders. I had to reformat ten systems cos it keep restarting my systems
sose
Network Engineer
analysethis.co/index.php/forum/index
15 years 10 months ago #28849
by talk2sp
BORN TO BE GREAT
c0de - 3
..........................................................
Take Responsibility! Don't let failures define you
Replied by talk2sp on topic I DONT THINK U HAD TO.....
i do not support the reformatting of a system cos of viruses. hence ur system boots up to windows and then stays for like 5 mins then u can boot that same system in safe mode with networking... em spy bot s & d could have fixed the issue if u ran it in safe mode with networking... (safe mode with networking cos u will need to run an update with spy bot b4 u scan.
BORN TO BE GREAT
c0de - 3
..........................................................
Take Responsibility! Don't let failures define you
15 years 10 months ago #28854
by sose
sose
Network Engineer
analysethis.co/index.php/forum/index
Replied by sose on topic Re: virus attacks: our experience
in theory the virus will not function in safe mode because limited drivers are loaded in safe mode. but in practice things could be really inside out
sose
Network Engineer
analysethis.co/index.php/forum/index
Time to create page: 0.142 seconds