virus Attack
Created: 30 Apr 2009 | 10 comments
we have antivrus on our network and we are still experiencing infestation in our network can anyone help with any information on how to stop them from coming into the network.
Blog Entry Filed Under:
About Security Community Blog
The Security Community Blog is the perfect place to share short, timely insights including product tips, news and other information relevant to the Security community. Any authenticated Connect member can contribute to this blog. Filter by:
Blog Tags
Endpoint Protection (AntiVirus) 11.x Data Loss Prevention (Vontu) Endpoint Protection Small Business Edition 12.x Tip/How to 12.x Best Practice Messaging Gateway 10.x Mobile Security Control Compliance Suite Symantec Security Information Manager Critical System Protection Installing Symantec Protection Suites (SPS) Basics 9.x and Earlier Network Access Control Reporting Configuring Hosted Mail Security Endpoint Encryption Web Gateway Mail Security for Exchange/Domino Features
Comments 10 Comments • Jump to latest comment
Can you give more information on the virus that is bothering you?
Regards Erik www.DinamiQs.com Dinamiqs is the home of VirtualStorm (www.virtualstorm.org)
*************************************************************
If your issue has been solved, Please mark it as solved
***********
my goodness there are so many questions we need to ask. I dont know where to begin.
1. What is the size of your organization?
2. What Anti-virus solution are you using?
3. How are you able to determine that your network is being "infested" with viruses?
4. Do you have any perimeter anti-virus controls? (firewall, IPS, etc)
5. As Erikw stated above, do you know the particular strain of virus you seem to be getting infected with?
does all the machines are protected with antivirus in your network and all Operating systems are fully patched.Do You Use a firewall ?
do u have firewall installed on ur mc?? or u r mc is in netwoek and u have common firewall at server???
This should be in the forums/thread area. Whenever you have a question that requires attention / answering from other community members, please post in the forum area, not the blog area. Thank you,
Eric
check out the community at www.infoblox.com/community
Can't you just move this page? It's been a while now and I'm sure the thread starter would like more feedback from us.
“Your most unhappy customers are your greatest source of learning.”
I agree mon. I think he actually has to be the one to move it though. I don't see how to do it myself, and i think Eric probably would have already if he could / thought it was appropriate (since it is a blog). Hope he comes back and posts more info so we can help.
Grant
Please don't forget to mark your thread solved with whatever answer helped you : )
hi prudence;
whether issue is resolved?
Hi did you run any free online scanners. One you can run is from Trend Micro called House call, link is below. See if that cleans up the mess.
Good luck.
http://housecall.trendmicro.com/
If you have your antivirus still up and running (and updating). Check the logs. It might have caught it already and that it could be a recurring infection. Downadup/Confilcker - for example - would be hard to eliminate completely even if the AV installed deletes the files and running a full scan shows that it is already treated.
Know the threat and how it spreads and start from there. Blocking ports and limiting what files to read/write across the network would geatly help.
You may also wish to check the startup, task manager/processes and Windows directory for anything unusual.
“Your most unhappy customers are your greatest source of learning.”
Would you like to reply?
Login or Register to post your comment.