13:39 Arctic fox crept silently (panic topic) | |
| Nothing foretold disaster, users holding a little work and did not know the grief, until suddenly one of the machines are not, and immediately swore not dead node, then on the other, in the third. Of the department learned of the situation only a couple of days, and the fire was underway in all. The servers (where antivirus was otkolochen for performance reasons), there were hundreds of infected exe files, and contagion has spread across all departments. Classic Start? Yes, that's just the usual in such cases, a three-day Abraham did not help. For two weeks the server being infected, none of the antivirus software installed on them can not catch the time of infection rassharennye exe files that you want and then run the users. That is, they are sort of like, but only when it is too late and the infection back to the cured machines where the antivirus is not helping. Virus sality (sector.12) description of what he does (like one of the most detailed on the network) here: aborche.livejournal.com/1300.html No At least, the data is not destroyed, but recently received information that he pulls from a network module that banging and shifrouet docks. and when this module will work xs. Output is not seen too many cars, anti-virus software are dying like flies, exe files on the balls to lie, are written so that the folder is read only can be, config files are there, if you make a read only exe, it can be easily removed ( I understand deleting the file - it sovystvo folder) even though the modification is prohibited. The virus apparently does not modify and copy the file, writing a new one the same with him inside. Why not work servakah antifirusy when writing files, I did not understand. If the handles on the bowl you put the infected file - see if the virus infects through the same ball - do not see. That's such garbage here malyata! UPD: at the request of the audience, the purpose of unspecified topic in question is clearly what to do? UPD2: advice on the restructuring of infrastructure, of course valuable, but you do not seem to deal with the restructuring of infrastructure during the fire as something ... inappropriate? | |
|
| |
| Total comments: 17 | 1 2 » | ||||||||||
| |||||||||||
| 1-10 11-17 | |||||||||||
