God of Thunder

So I'm scanning a user's PC today and she has 1173 infected files on her PC.

1173!!!!!! WTF?????

Turns out she got some e-mails with attachments she couldn't open and just kept trying!!

Part of it was our fault because the latest and greatest virus scan wasn't installed. It's a long story, trust me. There's a lot of

Me - "The latest vesion is in the newest build."
Tech - "I thought I was using the latest build."

Needless to say, all of that got straightened out and the user has the latest software, but 1173 infected files. Again...WTF????

So, let's here your horror stories. I'm sure someone has come across some pretty infected PCs

__________________
I reject your reality, and substitute my own

-- Adam Savage

Destrox

Wow.. a award can goto that user for being the biggest security risk to her company.

__________________
You bore me.... next.

Scorpion23

Well it doesn't really compare, but I just got called in to look at a computer. It was running slow and had so many errors you couldn't even open a window. Turns out they had over 475 instances of spyware.

__________________
"Empirically observed covariation is a necessary but not sufficient condition for causality" - Edward Tufte

Silverbrain

The record in my shop is 891 infected files and on another record, 1104 items from ad-aware. The virus system ran fine after the cleaning. The ad-aware...well that needed a rebuild in order to fully function.

__________________
Over Thinking, Over Analyzing
Seperates the Body from the Mind - MJK

Cynthetiq

too many to list, and too many workstations to cover....

30+ floors, 150 computers per floor...

__________________
I don't care if you are black, white, purple, green, Chinese, Japanese, Korean, hippie, cop, bum, admin, user, English, Irish, French, Catholic, Protestant, Jewish, Buddhist, Muslim, indian, cowboy, tall, short, fat, skinny, emo, punk, mod, rocker, straight, gay, lesbian, jock, nerd, geek, Democrat, Republican, Libertarian, Independent, driver, pedestrian, or bicyclist, either you're an asshole or you're not.

Lord Humungus

GoT, sounds like that user needs a reinstall.

__________________
I am still searching for the movie this quote was in...
"Make you strong, like bull", said in a russian accent
Post here if you know anything...PLEASE!

sailor

We have gotten to the point in the tech support area of my school that when a user has more than a couple viruses, or more than a few hundred ad-aware infected files, we just nuke the machine.

__________________
"Good people do not need laws to tell them to act responsibly, while bad people will find a way around the laws."
--Plato

Mephex

I never had a problem with viruses, I mean, cleaning them that is. It's the f'ing spyware that chews up the registry that pisses me off. I've gotten to the point where if I have to work on a machine for more then an hour, I just wipe it.

Hell yeah, it's amazing what a otherwise innocent teenage chatter can do to a machine in a matter of minutes.

Ghost baby ghost

God of Thunder

Oh, that's what happened!!

Ghost is a tech's best friend.

__________________
I reject your reality, and substitute my own

-- Adam Savage

Holo

try over 5000 pieces of spyware/dialers/etc.

http://tfproject.org/tfp/showthread....threadid=39423

__________________
I happen to like the words "fuck", "cock", "pussy", "tits", "cunt", "twat", "shit" and even "bitch". As long as I am not using them to describe you, don't go telling me whether or not I can/should use them...that is, if you want me to continue refraining from using them to describe you. ~Prince

the_marq

Well I can't remember all the facts, but I did find over 20000 infected files on my CEO's laptop once. It was a .vbs virus that kept replicating itself.

Happened back in 2000 or 2001, wish I could remember what it was called.

__________________
The Truth:

Johnny Cash could have kicked Bruce Lee's ass if he wanted to.

#3 in a series

Silverbrain

Damn!! I'm not sure weather to applaud, or cry at that



*applauds*

__________________
Over Thinking, Over Analyzing
Seperates the Body from the Mind - MJK

Crack

I don't count them anymore, I just Ghost them... much eaiser.

__________________
Crack, you and I are long overdue for a vicious bout of mansex.

~Halx

Lock~Down

Haha. I am completely suprised on how many infected computers there are on the net. The only time I've been infected is when someone else ran a visual basic script that infected all of my image files. They couldn't be repaired so I had to reformat.

I don't ever remember a computer getting infected at work though. We do have a pretty tight network so I'm not to suprised. (Part of that is due to us having ISDN connection. So we are afraid to even touch the net because it goes so slow.)

User Name

By nuke, do you mean reformat and reinstall the OS or throw away the machine? If you do the latter, you should take them and reformat, and then sell them or something.

soccerchamp76

Our school's techies think ghosting is the solution to everything. Something wrong, "ghost it."

__________________
Brian Griffin: Ah, if my memory serves me, this is the physics department.
Chris Griffin: That would explain all the gravity.

propaganda

Kind of off topic but it sounds like Dells solutions to everything. If it doesn't work reformat...

Now onto the topic. That is an insane amount of spyware Holo. I just saw the highest I've seen all my life before this thread and it was 163. I was thinking that was a lot but damn was I wrong.

yodapaul

A couple of months ago...

I got a call from a client, their computer was opening porn windows and they couldn't get the windows to close. I went over and found 56 different windows open.

So I ended the IE process(it is xp) and ran adaware I found about 3000 entries. Then I installed (they didn't have any anti-virus!?!) and ran a Anti-Virus and found 130,000 infected files. After getting all that cleaned up, I ran adaware again and found another 2000 spyware files.

That was a long day.

__________________
I'm Just here to help.
Now, Where is your problem?

JohnnyRoyale

Also sounds like he/she needs a popup stopper, and ad-watch turned on...

Worst Iv'e seen is 978, and that was a known porn surfer, after a month and a half

__________________
I'm gonna be rich and famous, as soon I invent a device that lets you stab people in the face over the internet.

Holo

I would bet it was Nimda. I HATED that fucking virus. It was the only virus that every really fucked with me. I still have backup CDs with a copy of that damn thing that I didn't see at backup time. Of course without Outlook it was useless so Outlook hasn't been on this machine since.

__________________
I happen to like the words "fuck", "cock", "pussy", "tits", "cunt", "twat", "shit" and even "bitch". As long as I am not using them to describe you, don't go telling me whether or not I can/should use them...that is, if you want me to continue refraining from using them to describe you. ~Prince

God of Thunder

The virus the user had in my case was the netsky.b@mm. It apparently tries to place itself in any folder with the word share or sharing in it. That wasy it can be sent out via any P2P programs.

Since we don't allow any of those here, it placed itself in any folder named shared on the hard drive. Since a lot of software has shared components, like office, that's where the 1173 files came from. It was mainly the same 20 or so files in multiple folders.

The fact that this was a homicide detective made the situation even worse (or funnier from my standpoint). She should have known better than to try and open an e-mail attachment from someone she didn't know.

I tell ya, the cops are the worst problem we have in IT. Makes ya wonder how crimes ever get solved.

__________________
I reject your reality, and substitute my own

-- Adam Savage

MSD

If it takes more time to fix it than it would to Ghost it, then ghosting is teh right answer. When I worked in IT for my high school, everything people saved was on network drives, so theoretically, every computer should be teh same, and ghosting will be faster and more efficient.

Some of you nerds will apppreciate this:

Me: "Dave, I need the ghost disk"
Dave: "Why?"
Me: "Someone installed Real Player. Why won't they just disable installs?"
Dave: "The people in charge aren't the brightest of the bunch. Here's the disk"

Oh, almost forgot, when I got Klez'ed, I couldn't boot to Windows to run the FixKlez utility, so I had to manually go through every directory (11,000) and remove two virus files from each one.

merkerguitars

Amen if it's sooo messed up it's just easier and cheaper to reghost..

__________________
Donate now! Ask me How!

Please use the search function it is your friend.

Look at my mustang please feel free to comment!

http://www.tfproject.org/tfp/showthread.php?t=26985