Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 2005 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Virus Like Activity

Syntax

Just received this regarding some strange behaviour on a workstation protected by sophos does this ring bells to anyone out there?

On Friday **** reported to me that his computer had replaced the normal google search engine to a picture of 3 old men. I have now seen a similar instance but this time on the *********** website, the school slide show being replaced by 2 pictures not on the website (a picture of 2 cables and a badger). I have run sophos to check for viruses, **** machine came up with no viruses the key stage 1 laptop is still running. If we log onto other machines we do not get the problem, any ideas.

:2877


This thread was automatically locked due to age.
Parents
  • 0

    I don't know what it is - but yes, we were hit about 18 months ago by a webpage that replaced our intranet page, across most stations, this had malicious code in it - the first thing I did was to block the website via our proxy server and then contact Sophos with the name of the website so they could start delving in to what is going on - may be best to raise a support call through the Sophos site, then call them immediately so you can aim to get the quickest turn around possible!

    When you're having virus like activity, you have no idea what else is going on that ISN'T visible - this activity could have opened up a security loop where malware is being dropped left, right and centre.

    To sum it all up - contact Sophos asap with as much detail as you have.

    Hope that helps - in the end.

    :2882
Reply
  • 0

    I don't know what it is - but yes, we were hit about 18 months ago by a webpage that replaced our intranet page, across most stations, this had malicious code in it - the first thing I did was to block the website via our proxy server and then contact Sophos with the name of the website so they could start delving in to what is going on - may be best to raise a support call through the Sophos site, then call them immediately so you can aim to get the quickest turn around possible!

    When you're having virus like activity, you have no idea what else is going on that ISN'T visible - this activity could have opened up a security loop where malware is being dropped left, right and centre.

    To sum it all up - contact Sophos asap with as much detail as you have.

    Hope that helps - in the end.

    :2882
Children
No Data
Unfiltered HTML