V
V
Valery Osipov2012-08-10 15:24:04
Computer networks
Valery Osipov, 2012-08-10 15:24:04

How to find a virus on the net?

There is a peer-to-peer Windows network of ~ 30 computers, a "server" with a shared network folder.
Periodically, some kind of infection, among other nasty things, changes the attributes of this network folder to “system hidden”. Checking the server for viruses did not find any, but I don’t want to check all computers.

Is there any way to find out on which computer the virus is located? How to prohibit changing the attribute and alert when you try to change it with the address of the computer?

Answer the question

In order to leave comments, you need to log in

4 answer(s)
F
foxyovovich, 2012-08-10
@foxyovovich

set up an audit on a shared folder on the success of writing attributes
in event logs in security, task category: “file system” there will be events which user has changed file attributes

T
tyderh, 2012-08-11
@tyderh

And this is definitely a virus, and not some arrogant user?

N
Nikolai Turnaviotov, 2012-08-10
@foxmuldercp

Rearrange the server operating system - update to the maximum, install an antivirus.
remove full access rights to the network share (not to be confused with ntfs rights), and there most likely are full ones.
rearrange in turn all the other stations with the installation of all updates on Windows, installing an antivirus and at the same time taking away admin rights from the user in order to run less through the stations.
consider a dedicated server

N
Nikolai Turnaviotov, 2012-08-10
@foxmuldercp

find out - nothing. only checking and updating all pc

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question