Solved

(Urgent Help)  Sky net Virus  is using ISA Firewall Client

Posted on 2004-04-19
6
981 Views
Last Modified: 2013-12-04
hi guys

my network is under attack of Skynet virus.........i am using ms ISA  server for proxy and security purposes...... the problem due to virus is that some IPs are accessing to the Firewall sessions of ISA servers.......... i have tried my best to block them through routers access list and through ISA security  policies but in vain ..............
can any bosy tell me how i can get rid of these unknown sessions (IP addresses)

thanks in advance
0
Comment
Question by:rjunaid79
  • 6
6 Comments
 
LVL 12

Expert Comment

by:trywaredk
Comment Utility
Cleaning your computer  - and protecting it in the future -  can't be answered with one issue.

As you can see in my url below there are at least 7 different issues, where you should decide 1 of each, or else you does'nt protect your computer at all.

The reason is, that the many different programs not always protects against each other, and each of them does'nt protect equally.

It's very important, that you study all of these issues in my knowledgebase (some of them are freeware):
http://www.tryware.dk/English/Knowledgebase/HowToProtectYourComputer.html

BTW: I'm using the Trend Micro virus-suite, and SoftScan , and haven't got any of my servers or computers infected since 1999.

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open
0
 
LVL 12

Expert Comment

by:trywaredk
Comment Utility
How to block IP Addresses?
http://www.mcse.ms/message560686.html
0
 
LVL 12

Expert Comment

by:trywaredk
Comment Utility
Block IP Addresses With IPtables
http://www.netadmintools.com/art216.html
0
Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

 
LVL 12

Expert Comment

by:trywaredk
Comment Utility
Redirect ip-address to non-existent ip-address in hosts-file
http://support.microsoft.com/?kbid=101927


0
 
LVL 12

Accepted Solution

by:
trywaredk earned 125 total points
Comment Utility
0
 
LVL 12

Expert Comment

by:trywaredk
Comment Utility
:o) Glad I could help you - thank you for the points
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now