Re: Networking to a machine know to be infected with a virus

From: Bob Willard (BobwBSGS_at_TrashThis.comcast.net)
Date: 09/09/03 

Date: Tue, 09 Sep 2003 07:33:16 -0400

Philip Herlihy wrote:
> Here's a puzzle: A friend has an old W98 machine which he is sure has a
> virus infection. (Hardly surprising, he's never put an antivirus on it,
> despite my pleading.) He's a good friend, so I (still) want to help him get
> his data back, if possible.
>
> Trouble is, the floppy doesn't work, nor does the CD drive. Network or
> modem is the only way in or out.
>
> I've considered asking him to do an online scan via Symantec or McAfee
> websites, then download the specific removal tools. Alternatively I could
> put an Antivirus, definitions-file and firewall on an FTP site and download
> them from there onto the machine. However I don't think it's that
> socially-responsible to allow his machine to spray more viruses at the world
> while he's online. So, I've been considering connecting by cable to (gulp!)
> my fully-patched XP Pro machine with the latest AV and definitions, and
> scanning it as a mounted drive. I use a workgroup rather than a domain.
>
> Is this madness? If not, what precautions should I take? I've thought of
> running the W98 box as a user with low access rights on my XP box, and
> setting the firewall to distrust that machine. Any comments?

That should work. I know that eTrust and NAV are willing to scan mapped
net.drives, and IIRC McAfee did as well. You XP PC will not touch any
files on that net.drive until you tell it to, so virii cannot invade
your PC. 

-- 
Cheers, Bob

Relevant Pages

  • Re: Networking to a machine know to be infected with a virus
    ... A friend has an old W98 machine which he is sure ... He's a good friend, so I ... definitions-file and firewall on an FTP site ... and setting the firewall to distrust that machine. ...
    (microsoft.public.security)
  • Networking to a machine know to be infected with a virus
    ... A friend has an old W98 machine which he is sure has a ... He's a good friend, so I want to help him get ... put an Antivirus, definitions-file and firewall on an FTP site and download ... setting the firewall to distrust that machine. ...
    (microsoft.public.security)
  • Re: What is the event Viewer telling me?
    ... You need a software firewall as well. ... >> Michael Solomon MS-MVP ... >> Backup is a PC User's Best Friend ...
    (microsoft.public.windowsxp.basics)
  • Re: Networking to a machine know to be infected with a virus
    ... A friend has an old W98 machine which he is sure ... He's a good friend, so I ... secondary disk controller). ... checks, boot sector checks etc, are made. ...
    (microsoft.public.security)
  • RE: Yahoo Messenger Stale Sessions
    ... sequence correct (the TCP application on the host doesn't look at the IP ... If your site is protected by a stateful firewall (or even a NAT device ... If the intention is to masquerade as your friend would it be easier to ... Subject: Yahoo Messenger Stale Sessions ...
    (Incidents)
Quantcast