A few pickups on this:
1. Find out who put Windows shares on a database server and have a
discussion with the person concerned.
2. Who opened up the firewall to the network to allow this to happen?
Similar discussion to follow........
Remove Windows sharing as a facility and lock it up.
Get the firewall people to close it up -
The rule is close everything - open what you need.
The rule is *not* close what you don't want.
If you ask a network administrator "Which ports did you block?" and
they start to tell you what they have *blocked* then have discussion (as
above) - give extra lumps
3. Who loaded a virus on a machine that was *not* protected and where from
("space invaders maybe?" or a mail attachment (some never learn)
(discussion)
I use AV software myself OK with no problems, but it is not configured to
"scan all files on opens" , "scan all files on reads" or "scan all files on
writes". It just scans all executables and scripts. Some AV software seem to
be friendly - others seem to be (distinctly) less so.
Can we have a straw poll on AV software? Just post a subject of ANTIVIRUS -
(name) - (version) *GOOD* or *BAD* as necessary - let's hear it.
Regards
JayJay
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of uniVerse mailing list
Sent: 24 March 2004 14:24
To: U2 Users Discussion List
Subject: RE: UniVerse 10 on Win2k3
up until yesterday i'd have agreed with you. However a client got infected
with a virus that symantec *claims* to have known about since December, but
wasn't actually detected until i sent them the sample and it appeared in
last nights defs!
Virus spread via irc and *open admin$ shares* on the server - with weak
administrator passwords.
Therefore the server got infected. A realtime scanner would have picked this
virus up this morning. (just make sure the realtime scanner does not scan
the database itself)
-----Original Message-----
From: Anthony Youngman [mailto:[EMAIL PROTECTED]
Posted At: 24 March 2004 09:29
Posted To: uniVerse
Conversation: UniVerse 10 on Win2k3
Subject: RE: UniVerse 10 on Win2k3
AARRGGHH!!
NEVER EVER run antivirus on a server.
--
u2-users mailing list
[EMAIL PROTECTED]
http://www.oliver.com/mailman/listinfo/u2-users
--
u2-users mailing list
[EMAIL PROTECTED]
http://www.oliver.com/mailman/listinfo/u2-users
