Adware Desktop Media
-
Mayi. Can you help me with an adware problem.
It's a new variant of Adware Desktop Media.
I can't seem to track down its location within the network.
Currently, it is still hiding somewhere inside the network.
Any ideas? -
those computers boot from network?Originally posted by Conner MacDermott:Mayi. Can you help me with an adware problem.
It's a new variant of Adware Desktop Media.
I can't seem to track down its location within the network.
Currently, it is still hiding somewhere inside the network.
Any ideas? -
They connected 24/7 via intranet.
Last time, one computer got infected. So, I quickly killed it.
Then, got another computer infected again. So, I killed again.
Then, got another computer infected again. So, I off internet.
Then, another infected while off. So, network problem lor..
Software people already install antiware program already.
Scan. Scan. Scan. Also no use. New cases poping out everyday. -
disable each subnet and try lo...
-
lol sia... your server got track any details like...
which ID log into the computers.
den over 1 week u go see whether got the same user who use different computer kena this adware. den most probably is that person go install some .. ahem -
too much porn...
-
Which network? Your home network or company network?
Company network is out of bounds, unless you officially use me for a few days.
Home network, disconnect all PCs from the network...
From what you describe, sounds like you have a trojan... -
A trojan? Interesting..
How come the scans never detected it?
In that case, it's the software department problem liao.. -
Anyway.. My supervisor say tomorrow go back and work. See can close down everything and isolate the "thing" or not?
-
All PCs need to be scanned... not just one particular PC or random PCs...Originally posted by Conner MacDermott:A trojan? Interesting..
How come the scans never detected it?
In that case, it's the software department problem liao..
As for your company, see what they can do. If nothing, during lunchtime or after work, shutdown the network, delete any unknown files found.
Use these writeups as your guide: http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453079029
http://vil.nai.com/vil/content/v_138516.htm#tab7 -
Found something interesting. Somebody might be using P2P, specifically Kazza...
http://compnetworking.about.com/cs/kazaa/ht/disablecydoor.htm -
-
I pass these along to my colleagues as well.Originally posted by ndmmxiaomayi:All PCs need to be scanned... not just one particular PC or random PCs...
As for your company, see what they can do. If nothing, during lunchtime or after work, shutdown the network, delete any unknown files found.
Use these writeups as your guide: http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453079029
http://vil.nai.com/vil/content/v_138516.htm#tab7
-
I haven't go through the internet logs yet. Maybe one of the IP address belongs to Kazza..Originally posted by ndmmxiaomayi:Found something interesting. Somebody might be using P2P, specifically Kazza...
http://compnetworking.about.com/cs/kazaa/ht/disablecydoor.htm