RE: ROuter Reboot due to Virus !!

From: Santos, Andre (Andre.Santos@usi.net)
Date: Thu Oct 02 2003 - 11:57:07 GMT-3


Here Try these links

http://www.cisco.com/warp/public/707/cisco-sn-20030820-nachi.shtml

http://www.cisco.com/warp/public/707/cisco-sn-20030814-blaster.shtml

-----Original Message-----
From: Kurt Claes [mailto:Kurt.Claes@inseurop.com]
Sent: Thursday, October 02, 2003 10:50 AM
To: Gracie Pereira; sales@redspan.com
Cc: ccielab@groupstudy.com
Subject: RE: ROuter Reboot due to Virus !!

Hey guys,

Try to use a sniffer to "identify - locate" the users that are infected
with
the virus, and pull them out of the network.

Kurt

        -----Oorspronkelijk bericht-----
        Van: Gracie Pereira [mailto:goa0201@yahoo.com]
        Verzonden: do 2/10/2003 16:22
        Aan: sales@redspan.com
        CC: ccielab@groupstudy.com
        Onderwerp: Re: ROuter Reboot due to Virus !!

        This is what we get when for sh ver.
        System returned to ROM by error - a Software forced crash, PC
0x60475194

        we also tried reload the IOS but no help.

        thanks

        "Ben at Redspan Solutions Ltd." <bgluk@yahoo.co.uk> wrote:
        Do a 'show version' - what does the router give as the reason
for the
        reboot?

        Do you have any support contracts for the routers?

        Rgds
        Ben
        --- Gracie Pereira wrote: > HI everybody,
>
> We manage cisco 3660 routers with ver 12.2(2) XB5 version.
> due to recent virus attacks , the router keeps rebooting .
after
> staying up
> for couple of hours , we tried blocking the virus ports ..but
no
> help.
>
> Its now affecting couple more routers.Is there any way to stop
it
> before the router gets affected and start reloading on it own.
>
> Trying a lot of possibilites . If anyone has any
recommendation to
> this issue
> pls share the info..
>
> thanks
> goa0201
>
>
>
>
>
> ---------------------------------
> Do you Yahoo!?
> The New Yahoo! Shopping - with improved product search
>
> ***Get your CCIE and a FREE vacation: Shop.GroupStudy.com***
>
        



This archive was generated by hypermail 2.1.4 : Mon Nov 24 2003 - 07:52:55 GMT-3