Re: Possible *very destructive* Virus??

From: Henry Craven (IUnknown_at_Dot.Nyet)
Date: 09/20/04 

Date: Tue, 21 Sep 2004 09:05:17 +1000

Is he sure it is a Virus rather than an Intrusion by a vandal ?

What about the server itself ?
What do his logs say ?
What is his Network Schema ?
Strong Passwords ? Renamed Admin Account ?
Allowing Remote Access ? Hosting Website ?
...and ?...and ?..????

Please keep us informed if what's happening / found. If there is a
Virus or Vulnerability we're obviously anxious to know of it. 

-- 
Henry Craven {SBS-MVP}
    Melbourne Australia
"Buddy Greenshield" <gcsbend-at-bendcable-dot-com> wrote in message
news:u6UuJT2nEHA.3868@TK2MSFTNGP11.phx.gbl...
> I just got a call from a fellow consultant whose client had a complete
> network failure this morning.
>
> SBS2K3 Premium with 5 workstations XP Pro.
> 2 Nics running ISA server.
>
> This morning when they came in, every drive in every computer that was
> turned on and connected to the network had it's partition data blown
away.
> The only machine on site that was intact was a W2K system that was
turned
> off and unconnected from the network (shelved system).
>
> It's been a long time since I've heard of any viruses or other malware
that
> is so destructive.  He told me that he is using drive analysys
software that
> can find data on the drives, but no partitions.
>
> Anybody else heard of such a thing?
>
> Buddy G.
>
>

Relevant Pages

  • Re: Terminal Server Performance
    ... when we are having problems and it seems the network is fine during the ... I will have to analyze the data when the server starts going slow again. ... "Jeff Pitsch" wrote: ... the hard drives to see if commands are lining up during peak ...
    (microsoft.public.windows.terminal_services)
  • Re: Vista drive mapping to 2008 Server
    ... It sounds like something in the network infrastructure may not be working with some of these features. ... Try each setting both on the server alone, a client alone, then both. ... After doing this map a drive by any method then see if it loses the ... > No logon script used in this instance and it maps drives not used by> any ...
    (microsoft.public.windows.vista.networking_sharing)
  • RE: net use
    ... The network connection could not be found. ... mapped drives to properly register in T.S.. ... AD/Exchange Server) are fine. ... When you run the logon script manually, you receive "system error 85" error ...
    (microsoft.public.windows.terminal_services)
  • Re: Terminal Server Performance
    ... it appears that the bottleneck is with the ... I will have to analyze the data when the server starts going slow again. ... percentage in the network utilization?... ... the hard drives to see if commands are lining up during peak ...
    (microsoft.public.windows.terminal_services)
  • Re: Vista drive mapping to 2008 Server
    ... the server encountered a network ... "Kerry Brown" wrote: ... connect or map drives. ...
    (microsoft.public.windows.vista.networking_sharing)