After my recent LAN setup to have web sharing I was pleased at the excellent performance I was receiving.


Well less than a week later I had the pleasures of finding the performance (a P200 with 32mb RAM Win2k) was lacking- yes it lacked even more than you'd think even though it performed ok before!

Did a quick virus scan from Norton through the LAN. And I Found no less than 635 infected files!

Now my question is- At the time I had not installed any firewall measures albeit very naíve of me!

Would someone hacking my server have access to the workstations on the LAN? I am going to fully scan them but just wanted to get others opinions? I was using ICS btw.

Thanks,

i'm not sure what you are running on your LAN or how it is set up, but it is very likely someone could get access to your workstation if they had access to another box on your lan. All you really need is a sniffer. If your using like outlook you probably got hit by nimba so all your .html files were infected. Thats probably why there was such a high count.

Hi!
Virus and hackkers are two things.
I guess anybody could infect a system. It need not be a hacker. A hacker would either take your data, or be a silent chap who watches everything you do, or destroy your system.....

Have a great day :)

Regards
Amar

The correct terminology is 'cracker' not 'hacker' :)

isn't this just one of the many iis viruses that are out there ?

What?
People still use windows? Haven't you learned from what's been going on?

a P200 with 32mb RAM Win2k??? And it performed excellent??? :eek2:

Silly me, but I do not believe :rolleyes:

I was quite surprised too.

Mind you it has nothing installed on it :O

Hi, at home here, where there are several of us sharing the one cable connection to the net, we have a proxy server/fireall set up between the lan and the net. Well, actually, the proxy is down right now - hard disk failure :stickout

Anyway, the proxy is a Intel 486 box running Win95. The proxy server is Proxy+. Every few days the proxy server gets hammered by one of the nimbda type varients whereby every single directory on the PC gets infected by a virus carrying *.eml file. I am using a rather cheap virus protection program on that machine, I don't even remember the name as I type, but it is a CA offspin (which seems to be basically based on the Aussie product VET) something like my-E-Trust or something.

Anyway, 99% times this is no drama. Even though the virus software detects the infection at run time. by the time I get to it, it has done its evil and infected every directory on the HD. But, the thing is, being set up as a firewall and all, the nimbda virus or what ever it is never gets past the proxy and into the PCs on the LAN. So it is a matter of running the virus scan on the proxy and cleaning it out when it does get infected. Heck, there are probably better solutions, but as long as the infection doesn't make it past the firewall, I really don't give a damn. 1% times, this has been a probem, as cleaning the sytem has also resulted in cleaning out a corrupt system file. But that is easy to restore too. Mind you I thing the fact that the HDD in the proxy/firewall was on its last legs was something to do with this - you should have just heard the thing! hehe. I can't ell you the hell this poor old 486 has been through during its life. Fans failing! But the old beast keeps soldiering on! Will get down to my local swap meet next week to pick up a few more dust coated 100MB HDD to keep on hand to throw into the old dear as the need arises :)