Re: Advocacy #43: Virus hits; many in the company still down
- From: harryhydro@xxxxxxxxxxx
- Date: Fri, 6 Mar 2009 11:01:28 -0800 (PST)
On Mar 5, 9:59 pm, Tim Murray <no-s...@xxxxxxxxxxxx> wrote:
Tuesday my client company got hit by a virus, brought on by thousands of
targeted e-mails -- proper name spelling and all -- supposedly from Hallmark
and American Greetings. All day long the monitors in the elevator lobbies
flashed up a warning not to open these e-mails, but it was to no avail.
Although many of them did get caught by incoming firewalls, many got through,
and many attachments were opened.
Machines had to be reimaged from scratch. Our department admin had a visit
from IT today: Even though they reimaged her machine Wednesday, they stopped
by and told her that their network detection identified her machine was
reinfected.
All browsing outside the corporate firewall is blocked, but something weird
is going on: It's blocked only for Windows users. The Macs in advertising and
marketing are free to browse where they want (except for the standard list of
blocked sites, like FaceBook and such). And that's what's weird. I know of no
way to block something on the scale of "outside the firewall" only for a
certain set of machines. I was at a machine of someone who had her machine
reimaged and tried to go to Canon.com to download a driver ... no go, and she
said that IT told her the outside world is blocked. Yet I downloaded it to my
Mac just fine.
IT is mum on details. It's been purported that IT broadcast a hosts file to
do the blocking, while others say that the outside is not blocked at all ....
if you can't browse, you're still infected.
Many hundreds of machines are still down today, and lots of people just went
home.
Of course, my trusty PowerBook and I continued to be quite productive,
downloading drivers, uploading files to customer FTP servers (also
unreachable from Windows), etc.
I Love this story. How many dollars saved on your Mac compared to the
dollars wasted working-on the 'cheaper' PC's?...
BTW Host file in c:\windows\system32\drivers\etc directory. It works
good, though, if you know who to block.
.
- References:
- Advocacy #43: Virus hits; many in the company still down
- From: Tim Murray
- Advocacy #43: Virus hits; many in the company still down
- Prev by Date: Re: Advocacy #43: Virus hits; many in the company still down
- Next by Date: Re: Where are all the glowing posts?
- Previous by thread: Re: Advocacy #43: Virus hits; many in the company still down
- Next by thread: Macs immune to Windows PC price collapse
- Index(es):
Relevant Pages
|
