?

Log in

No account? Create an account
Sigh Internet connection coming and going. Mail sErever timing out.… - Peter Sheil [entries|archive|friends|userinfo]
Peter Sheil

[ website | Peter's Home Page ]
[ userinfo | livejournal userinfo ]
[ archive | journal archive ]

[Jan. 20th, 2005|04:15 pm]
Peter Sheil
Sigh

Internet connection coming and going.
Mail sErever timing out.
Passwords keep on needing to be reset.

Are those symptoms you are seeing?
Then you have the new virus / worm I mentioned earlier.
(http://www.livejournal.com/users/9eter5heil/5748.html)

How do I know this? I couldn't possibly say :-I

Another sigh
LinkReply

Comments:
[User Picture]From: feath
2005-01-20 05:08 pm (UTC)
get mozilla/firefox. :P
(Reply) (Thread)
From: fruitbatz
2005-01-20 07:11 pm (UTC)
i have firfox - um as of lastnight. should i delete the partitions and create new - blah blah?
shit! what antivirus you use peter?
(Reply) (Parent) (Thread)
[User Picture]From: petersheil
2005-01-21 08:46 am (UTC)
what antivirus you use peter?

On my own laptop Norton
@ work McAfee

Updating the virus defs is the first thing I do on my own PC when I start up and on my work PC it is done automatically at logon.

Good luck
peter
(Reply) (Parent) (Thread)
[User Picture]From: petersheil
2005-01-21 08:34 am (UTC)
I do run Firefox (unoficially). the problem is once this virus / worm gets into a network it searches for PCs with weak passwords on their Admin user and tries to login on them - creating a lot of network traffic and sometimes locking out "real" users from their machines - oh and also crashing authentication servers and proxy servers.

Grrrrr

I just hope today's better.
(Reply) (Parent) (Thread)
From: fruitbatz
2005-01-20 07:10 pm (UTC)

oh shits.
ive reformatted 2 times in 2 days because of those very symptoms and a couple others, nothings worked - now what
(Reply) (Thread)
[User Picture]From: petersheil
2005-01-21 08:42 am (UTC)
Well in our case we hunt down the infected machines, get them off the net (to reduce traffic and to stop further spread), remove the nasty (at least one version of it "hides" as MS Messenger) and put it back on-line.

For you I Guess it should go something like:-
1. Clean OS install (are you Windoze or Linux now?)
2. Start your anti-virus software
3. Load all OS patches - you may have to go on-line for this but there is probably no choice. If you have a fire wall check that nothing unexpected is going in otr out during this period.
4. Load all updates for your anti-virus software
5. Reboot
6. Check for any mal-ware
7. Relag i the knowledeg that you'll probably have to do it all again soon.

Good luck
peter
(Reply) (Parent) (Thread)
(Deleted comment)
[User Picture]From: petersheil
2005-01-21 08:49 am (UTC)
Yep, you're right.

The link to the virus / worm description is http://www.sophos.com/virusinfo/analyses/w32rbottw.html if you want to have a look.

Peace
peter
(Reply) (Parent) (Thread)