Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!think.com!zaphod.mps.ohio-state.edu!mips!news.cs.indiana.edu!cica!ogre!will From: will@ogre.cica.indiana.edu (William Sadler) Newsgroups: comp.sys.novell Subject: Re: Network Viruses Keywords: viruses Message-ID: Date: 23 May 91 16:20:31 GMT References: <1991May22.171859.12004@linus.mitre.org> Sender: news@cica.indiana.edu (News System) Organization: Indiana University Lines: 32 Nntp-Posting-Host: ogre.cica.indiana.edu I am currently using Netscan from McAfee to scan each volume for viruses. Here are some other ways to prevent them: 1) write protect boot disks and program disks 2) use virus protection software regularly 3) scan all new software before using 4) educate your users 5) minimize the number of users with supervisor priviledges 6) no one should have write priviledges in LOGIN,SYSTEM, and PUBLIC excepte Supervisor 7) Use the W and M flags to restrict access. Flag SRO does not work. 8) Run Netware's SECURITY program 9) Use the ps option with the network shells on boot up so that each user attaches to the correct server. 10) back up your server regularly Some symptoms are dissappearing disk space, dissappearing files, files increasing in size on their own, slow programs, out of memory errors, increased disk activity, users unable to login, and other strange behaviour. Thanks to Steve Gribble here at IU for providing most of this information after having experienced a Jerusalem-B infection first hand. Will -- *************************************************************************** * _______________\|/_ Will Sadler will@cica.indiana.edu * * Laser 44888 /|\ sadler@iubacs.bitnet * ***************************************************************************