Security  
RSS
Threads [ Previous | Next ]
RE: RE: RE: W32.Blaster.Worm
Showing 18 results.
Virus Protection
3:01 PM EDT 6/20/04
This thread contains ongoing discussions about virus protection. A number of previously posted topics were collapsed into this thread by an administrator. Posts appear in chronologic order.
W32.Blaster.Worm
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
This one is feisty so check all of your NT/2K/XP machines.

ERG

Chad
Norton Antivirus - purchase?
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
Is there a source for Norton Antivirus for Libraries at discount? I Need a 20 PC licence. Techsoup's Symantec's offerings are NOT for liraries (and schools). We are 501-3C non profit public library. Thanks
RE: Norton Antivirus - purchase?
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
Nick, for all of our software purchases we make sure to check one source, they seem to beat all of the others. I sound like a salesman, but we use ASAP Software, [url http://www.asapsoftware.com ]http://www.asapsoftware.com[/url]

They carry Microsoft, Symantec, Corel, Macromedia, and other software. Most of which could be on your State's contract.
After the MSBlast....
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
Will you consider using Linux in your libraries? Or perhaps Apple?
RE: W32.Blaster.Worm
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
For Sure! We've had one true infected machine (XP) and 2 "false" infections - a white screen pops up saying you're infected and Click Here to fix (no, I didn't fall for that) - one was Win2K and one Gates NT. Doing the Windows Norton virus updates (which were all pretty current anyway) seemed to take care of those. If only we could channel the misguided energy of whoever does this into something useful!
RE: Norton Antivirus - purchase?
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
We usually go through PCConnection (also known as GovConnection) [url http://www.pcconnection.com/ ]http://www.pcconnection.com/[/url] They usually do pretty well for price - haven't tried the source mentioned in another message, so it would be good to compare.

Pam
RE: RE: Norton Antivirus - purchase?
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
We sought quotes for Norton Corporate 8.1 and found tigerdirect.com to be the best.

They gave us government rates.

Chad
RE: RE: W32.Blaster.Worm
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
We have had several infections - so make sure you use those Windoes and virus definition updates!
RE: RE: RE: After the MSBlast....
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
At this point, the pros still outweigh the cons in most library settings.

While I support the use of open source software, it is probably just not feasible for everyone at thie point.

Perhaps some day...?
RE: RE: RE: W32.Blaster.Worm
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
... and make sure you spell Windows correctly.

ERG - can you tell it has been a long week for me?
RE: RE: RE: RE: After the MSBlast....
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
What are the pros and the cons?
RE: RE: RE: RE: RE: After the MSBlast....
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
A perspective on not using Windows

But first there is that computer pathogen du jour, the pesky MSBlast worm to be dealt with. This was an old story before any of us even read it this week. That darned worm, which exploits the recently discovered RPC DCOM vulnerability in Windows, has been creating a lot of trouble for no good reason. It targets TCP port 135. Why would any company have port 135 open to the Internet? It makes no sense. A competent network manager who is not using port 135 for something darned important ought to have that door locked tight. If your network was affected, you should be asking why.

Microsoft distributed a patch for this bug a month ago. If your network was affected, the patch wasn't installed. What took so long? But don't be too quick to blame your network administrator: In some companies, the data security guy has to approve a patch before the network guys can install anything. There is plenty of blame to pass around.

Microsoft is hardly blameless, either. A very good friend of mine (one of Microsoft's major customers at the time) recommended to Redmond precisely the e-mail safeguards that would have made this week's problem impossible. Since he was a big customer, they said they'd look into it, but did nothing. That was in 1991. Is 12 years too long to wait for vendor responsibility?

Yes.

[url http://www.pbs.org/cringely/pulpit/pulpit20030814.html ]http://www.pbs.org/cringely/pulpit/pulpit20030814.html[/url]
RE: After the MSBlast....
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
Microsoft products are a favored target because they're so widespread, not just because of inherent security issues. Why write a virus for Linux or Mac systems, since it won't create as much havoc?

Switching doesn't hold much appeal for me, basically because I'd have to reteach patrons who have a hard enough time with what we have now. Such as the patron who "didn't see" the full-screen-you-have-to-click-to-continue five minute warning on the computer timer.
RE: RE: After the MSBlast....
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
Your points are valid. Re-training users can be a burden but is that burden any bigger than having to worry about the latest worm or virus?

Remember you are paying for the privilege of having "script kiddies" constantly target your networks.

Perhaps a change is needed to an operating system that is not a target.
RE: RE: RE: RE: RE: RE: After the MSBlast....
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
I am only speaking from my experiences as a library tech and former Reference staffer. This is not an argument, debate, or meant to stir anything up.

Plain and simple truth is this - I work in a two county library system where 30 (my age) is considered young. Many of our staffers are still having problems adjusting to Galaxy as an automation system (we have had this DOS based system for 10 years at least!). At least with Windows based PCs many of them have one at home OR have had some exposure. The same can be said for the majority of our patrons.

To ask them to learn Linux, for example, when I myself have VERY LIMITED exposure to it, and my Supervisor, has NO exposure to it (yes a staff of 2 to handle 13 locations) would be impossible.

Furthermore, the majority of our patrons (and we have to answer to majorities) could not handle it as well.

Simply put it is impractical to implement (for us).

That being said, the low cost (or no cost), the open source, etc is all well and great. I love Mozilla (we replaced Netscape as our second browser choice with it). It has a great upside if your system/business/etc has the resources to take advantage of it.

But I could never see my system moving towards much more unless our County Commissioners won the lottery, hired more staff, etc.

We know that Windows is not perfect(nor is Linux for that matter), but for most of us, it?s all we have so we have to make do with it.

Sorry if that came off sounding like a rant.

Chad
RE: RE: RE: RE: RE: RE: RE: After the MSBlast....
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
Chad

I am not much older than you (35) and I did not consider your post as a rant. I enjoy these conversations because I want to understand the problems with moving to Linux or Mac or whatever.

I feel that my role as a librarian and tech geek is to expose our profession to a world where providing technology to our patrons does not have to be expensive.

Said about your staff:

>To ask them to learn Linux, for example, when I myself have VERY LIMITED exposure to it, and my Supervisor, has NO exposure to it (yes a staff of 2 to handle 13 locations) would be impossible.

I know that you and your supervisor have A LOT of work to do and are over-burdened. But my suggestion would be to slowly look into it. Many places offer cheap or even free classes in Linux. Think about the cost savings to your budget and the time saved from fixing Code Red, Nimda, MSBlast.exe, etc......

>We know that Windows is not perfect(nor is Linux for that matter), but for most of us, it?s all we have so we have to make do with it.

It is not all that you have, which is my point. You do have options.

In my job, I train many people on the Windows platform and many have a hard time with it. I do not think Linux's GUI's (KDE or Gnome) are that much different than the standard Windows interface.

I guess what I am saying is that the issue is training our patrons and giving them computer skills not just teaching them programs. Otherwise, patrons/staff will have a same problems we are discussing going from Windows 98 to 2000 to XP to ???

If you are going to have those issues anyway, why pay for it (money and time fixing worms and viruses)?
RE: Virus Protection
3:01 PM EDT 6/20/04 as a reply to Chrystie Hill.
Since this is related to Norton antivirus, I thought I'd post it here: has anyone had the recent experience of this error message? The window that pops up is titled "spa.exe: entry point not found", and the error message says: "procedure entry point GetLongPathnameA could not be located in dynamic link library KERNEL32.dll." A few weeks ago we had something similar on Gates machines, and after scans completed and we logged on as Reference, nothing came up - very scary! Restarting and logging back on as exec, then going out and back in as Reference seemed to fix whatever it was - I think maybe there should have been a restart after the live update. So I wondered if this was something others had come across.

Pam
Showing 18 results.