PDA

View Full Version : Strange Virus or Trojan



Brokengod
22nd July 2004, 19:28
Bit of a strange one to go with my weird week but has anybody come across a new virus that deletes the 'boot sector' of a hard disk that infects across a network? |dotty| This has happened without even being logged in.

I know of lots of trojans that can do freaky things to the content of your hard drive but have never heard of one that wasn't executed using a script (boot up or login or an executable that some idiot user has run.

Nick
22nd July 2004, 22:39
I did hear of a script that finds the domain controller server or fileserver...And find's users accounts, Then locks onto the startup script's u have enabled for users logins and ****'s up that way :)

coldie,

JonnyThunder
23rd July 2004, 07:15
Im pretty sure user error will have been involved at some stage, regardless of what they have told you!!

Brokengod
23rd July 2004, 17:46
All that happened with the hard drives is that the MRB was moved on them but my manager decided to send them off to be formatted and reinstalled (dopey prick) and I can't be bothered to recover any of data as it's alot harder now.

The virus on the network was the mydoom.l , nothing special about it but it looks like a trojan which deleted the MBR was dropped in via the backdoor part, not really suprising as we have no firewall for a network of 100 computers connected to the internet.

The funny later on in the day was when I was checking network and noticed alot of smtp traffic - all coming from my managers computer, of course he hadn't updated his computer all. He only had 2500 infected files on it |bigsmile| .

JonnyThunder
23rd July 2004, 20:02
Fire the prick. *****!!