To LUGNET HomepageTo LUGNET News HomepageTo LUGNET Guide Homepage
 Help on Searching
 
Post new message to lugnet.org.ca.rtltorontoOpen lugnet.org.ca.rtltoronto in your NNTP NewsreaderTo LUGNET News Traffic PageSign In (Members)
 Organizations / Canada / rtlToronto / 7573
7572  |  7574
Subject: 
The life as a technical support analyst...
Newsgroups: 
lugnet.org.ca.rtltoronto
Date: 
Thu, 12 Jun 2003 13:58:47 GMT
Viewed: 
437 times
  
So it's not Sledgehammer, or W32.SQLexp.worm...

Actually, we're not quite sure what virus it is but port 1434 is getting
throttled...

Or at least was... now,, after turning off all the systems in the branch (after
the 10th time of doing this), network traffic seems to be normal.

But here's the fun bit...

"How do we prevent viruses infecting our systems?"

This after 3 years of me sending out e-mails to everyone explaining what viruses
are, what they do, how to protet yourself to the best of your abilities, making
documents showing things like turning preview panes off, deleting e-mails,
emptying eleted items folders, and the like... numerous times, mind you--almost
every time I get a virus alert from Symantec or whomever, I send out an e-mail
to everyone talking about being cautious in opening e-mail from outside the
company, not opening attachements if you don't know the person that sent it to
you, especially if it looks like it was forwarded to everyone and their dog,
explaining that you can infect your system, and those around you, even if you
just read the e-mail...

So this has been going on since I started working here.

I've sent these e-mails as High Importance, Subjects like "Important--virus
warning..."

Here's a sample e-mail sent a few days ago--

"
Hello everyone,

Unfortunately, even with our diligence in these matters, we have had a few
systems in the Canadian Region infected with a virus.

I am doing a preliminary investigation at this time, but I wanted to inform you
of this issue.

Do not open any e-mail or an e-mail with an attachment if you don't know who
sent it.

As well, do not forward *any* non-Laidlaw related e-mail until further notice.
If you receive any e-mail from a Laidlaw employee that is not work related,
please be *very* careful opening it.  if you have any concerns, it is best to
contact the sender.

If you are sending an e-mail to a fellow employee, please put a unique message
in the Subject field, such as,
"Dave, this is the spreadsheet of the Bus routes that you requested"

As mentioned in an earlier e-mail, make sure your Preview Pane is off.  As well,
do not open any e-mail with an attachment unless you are sure the attachment is
virus free.

If you have any questions or concerns, do not hesitate to contact any member of
your IS staff.

We can be reached at 1-800-***-**** at ext. 435, or e-mail us at *********.

Take care,

Dave

David Koudys - Technical Support Analyst
Laidlaw Education Services, Canadian Region
david_koudys@vvv.lpsg.com       (***) **********
"My sense of humour is too advanced and avant-garde
for mere members of the public to appreciate"
                     - Natalie Hurley, Sports Night
"



Anyway, yesterday I get, "how do we protect ourselves..."

And I mention something like turning preview panes off and such, and they ask
"How do I do that?"

I casually mention the e-mail I sent out the day before, with the step-by-step
process...

And they say "Oh your messages?  I ignore them/delete them.  If it's important,
you'd call me."

Okay.

So I was her until 10 fighitng with this stupid virus--patching systems a,d
such, and I showed up at work at 7 a.m. to fight with this stupid virus, and
now, at 9:54, after turning off all the systems for the umteenth time, and
turning 'em all on, one at a time, preliminary results show the virus to be
gone.

It just went away.  Norton said it never existed, the patch that supposedly
looks for w32.SQLexp.worm says it didn't exist, and our firewall now sees no
activity hitting UDP 1434.

Today I hate my job.

Venting 'cause I can...

Dave K



Message has 3 Replies:
  Re: The life as a technical support analyst...
 
(...) Is Sledgehammer actually the name of a virus?! Cool! (...) What if it was port 1337? :) OR PORT 8455?!?!?! (...) I was just joking with a coworker in the assembly hall who was venting (he is very frustrated right now). I noted how our company (...) (21 years ago, 12-Jun-03, to lugnet.org.ca.rtltoronto)
  Re: The life as a technical support analyst...
 
(...) dave, I'm not much of a IS support guy, BUT I do know that on the machines that I am responsible for I recommend that people use Netscape and related products. Netscape has a browser and e-mail client built in, and in conjunction with even a (...) (21 years ago, 12-Jun-03, to lugnet.org.ca.rtltoronto)
  Re: The life as a technical support analyst...
 
(...) Ah yes - your basic I/O (Incompetent Operator) error - been there done that. I'm currently doing phone support; Yesterday I spent over an hour with an old lady who apparently knows nothing about computers (and even English) trying to get her (...) (21 years ago, 12-Jun-03, to lugnet.org.ca.rtltoronto)

12 Messages in This Thread:





Entire Thread on One Page:
Nested:  All | Brief | Compact | Dots
Linear:  All | Brief | Compact
    

Custom Search

©2005 LUGNET. All rights reserved. - hosted by steinbruch.info GbR