Re: NT Partitions

From: David Brown <dave(at)mrbonzi.co.uk>
Date: Wed May 14 2003 - 15:34:46 EDT

('binary' encoding is not supported, stored as-is)
In-Reply-To: <007101c31a32$b972c7a0$cc01a8c0@dave>

The system was NT4 servers 1 x PDC (the one that crashed) 2 x BDC and 1 x Multimedia - Workstaions Win98 - Educational Establishment. The Head of ICT (Teacher) has full administrator privalages and was in charge when I was off. No they have not revealed the name of any virus. Whilst off they have changed the system with new servers WIN2000 and XP Workstations. Data was retreaved from the 'infected' disk and YES I did have virus protection, which was scheduled to download new dats every day and scan before backups every night.

Dave B
>Received: (qmail 26718 invoked from network); 14 May 2003 15:59:16 -0000
>Received: from outgoing3.securityfocus.com (205.206.231.27)
> by mail.securityfocus.com with SMTP; 14 May 2003 15:59:16 -0000
>Received: from lists.securityfocus.com (lists.securityfocus.com
[205.206.231.19])
> by outgoing3.securityfocus.com (Postfix) with QMQP
> id 691A6A313E; Wed, 14 May 2003 10:06:15 -0600 (MDT)
>Mailing-List: contact focus-virus-help@securityfocus.com; run by ezmlm
>Precedence: bulk
>List-Id: <focus-virus.list-id.securityfocus.com>
>List-Post: <mailto:focus-virus@securityfocus.com>
>List-Help: <mailto:focus-virus-help@securityfocus.com>
>List-Unsubscribe: <mailto:focus-virus-unsubscribe@securityfocus.com>
>List-Subscribe: <mailto:focus-virus-subscribe@securityfocus.com>
>Delivered-To: mailing list focus-virus@securityfocus.com
>Delivered-To: moderator for focus-virus@securityfocus.com
>Received: (qmail 8437 invoked from network); 14 May 2003 15:47:25 -0000
>Message-ID: <007101c31a32$b972c7a0$cc01a8c0@dave>
>From: "Dave" <dauern@cox.net>
>To: "David Brown" <dave@mrbonzi.co.uk>
ON48256D26.0002DA49@ams.panasonic.com.sg>
>Subject: Re: NT Partitions
using
>it, or was it supposed to just do it's job until you got back without any
claims "a
>> virus attack is responsible"
>> into consideration as to what had really happen. Usually claiming a
>virus
work
>> > for a while and whilst I was off our system crashed. I have been told
>> > that the partitions had been wiped by a virus, can this be ? I did
>have
>> > virus protection running to download new dats in the morning and to
-
>---
>> Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam,
today
>to
>>
>> ensure your place. http://www.securityfocus.com/BlackHat-focus-virus
>> -----------------------------------------------------------------------
-
>----
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> -----------------------------------------------------------------------
-
>---
>> *** Wireless LAN Policies for Security & Management - NEW White Paper
>***
>> Just like wired networks, wireless LANs require network security
>policies
-
>----
>>
>>
>
>
>-------------------------------------------------------------------------

--

>*** Wireless LAN Policies for Security & Management - NEW White Paper ***

>Just like wired networks, wireless LANs require network security 

policies 

>that are enforced to protect WLANs from known vulnerabilities and 

threats. 

>Learn to design, implement and enforce WLAN security policies to 


lockdown enterprise WLANs.

>

>To get your FREE white paper visit us at:    

>http://www.securityfocus.com/AirDefense-focus-virus


---

>

>


---------------------------------------------------------------------------
*** Wireless LAN Policies for Security & Management - NEW White Paper ***
Just like wired networks, wireless LANs require network security policies 
that are enforced to protect WLANs from known vulnerabilities and threats. 
Learn to design, implement and enforce WLAN security policies to lockdown enterprise WLANs.

To get your FREE white paper visit us at:    
http://www.securityfocus.com/AirDefense-focus-virus
----------------------------------------------------------------------------

Received on Thu May 15 09:59:17 2003