Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.
Security Community Blog

virus Attack

Created: 30 Apr 2009 • 10 comments
PRUDENCE's picture
0 0 Votes
Login to vote

we have antivrus on our network and we are still experiencing infestation in our network can anyone help with any information on how to stop them from coming into the network.

Comments 10 CommentsJump to latest comment

erikw's picture

Can you give more information on the virus that is bothering you?

Regards Erik www.DinamiQs.com Dinamiqs is the home of VirtualStorm (www.virtualstorm.org)

*************************************************************
If your issue has been solved, Please mark it as solved
***********

0
Login to vote
shaun_b's picture

my goodness there are so many questions we need to ask. I dont know where to begin.

1. What is the size of your organization? 
2. What Anti-virus solution are you using? 
3. How are you able to determine that your network is being "infested" with viruses? 
4. Do you have any perimeter anti-virus controls? (firewall, IPS, etc)
5. As Erikw stated above, do you know the particular strain of virus you seem to be getting infected with? 

+1
Login to vote
Bijay.Swain's picture

does all the machines are protected with antivirus in your network and all Operating systems are fully patched.Do You Use a firewall ?

+1
Login to vote
nick_123's picture

do u have firewall installed on ur mc?? or u r mc is in netwoek and u have common firewall at server???

+1
Login to vote
Hear4U's picture

This should be in the forums/thread area.  Whenever you have a question that requires attention / answering from other community members, please post in the forum area, not the blog area.  Thank you,

Eric

check out the community at www.infoblox.com/community

+1
Login to vote
mon_raralio's picture

Can't you just move this page? It's been a while now and I'm sure the thread starter would like more feedback from us.

“Your most unhappy customers are your greatest source of learning.”

+1
Login to vote
Grant_Hall's picture

I agree mon. I think he actually has to be the one to move it though. I don't see how to do it myself, and i think Eric probably would have already if he could / thought it was appropriate (since it is a blog). Hope he comes back and posts more info so we can help.

Grant

Please don't forget to mark your thread solved with whatever answer helped you : )

+1
Login to vote
i2professional@yahoo.com's picture

hi prudence;
whether issue is resolved?

+2
Login to vote
sbertram's picture

Hi did you run any free online scanners.  One you can run is from Trend Micro called House call, link is below.  See if that cleans up the mess.
Good luck.
http://housecall.trendmicro.com/

0
Login to vote
mon_raralio's picture

If you have your antivirus still up and running (and updating). Check the logs. It might have caught it already and that it could be a recurring infection. Downadup/Confilcker - for example - would be hard to eliminate completely even if the AV installed deletes the files and running a full scan shows that it is already treated.

Know the threat and how it spreads and start from there. Blocking ports and limiting what files to read/write across the network would geatly help.

You may also wish to check the startup, task manager/processes and Windows directory for anything unusual.

“Your most unhappy customers are your greatest source of learning.”

0
Login to vote