Computer Viruses: What are good ways to trace the origin of virus in a network?

how did FBI do about the LoveLetter
Answer:

LoveLetter The "LoveLetter" worm has this comment within it's code, but i am not sure they ever found the real author: rem barok -loveletter(vbe) <i hate go to school> rem by: spyder / / @GRAMMERSoft Group / Manila, Philippines http://en.wikipedia.org/wiki/ILOVEYOU What are good ways to trace the origin of virus in a network? Company: Within a company any client and server should be protected with a anti-virus software that reports issues to the central system. If you want to analyze it's way then you just need to view the log file and search for the first infection (eventually the first few infections if it spreads very fast). Typically companies use special Servers (like Cisco Ironport) to scan incoming and even outgoing mails for infections. If it's an unknown virus it's way can be analyzed within a forensic investigation ... it's a question of how important it is for the management. International: Providers like McAfee, Symantec, etc. get informations about new virus infections of customers and can see the approximate origin. Then the intelligence has the ability (and right by laws) to analyze log files of internet providers. If your FBI wants to know more information about a virus that came from Germany, they just call the BND and get it. It is daily business for intelligences to work together and exchange useful informations.

Was this solution helpful to you?

Other answers

Computers get locked by FBI MoneyPak Virus? Are you currently requested to cover a amount of fine to unlock your personal computer? Be attention, that is really a scam. The computer lockup screen FBI MoneyPak is a virus which pretend to become a official organization to scam victim to purchase the cash via MoneyPak Please don't pay any cash, whenever you get such sort of message. It won't assist you to unlock your personal computer even you pay. The only approach would be to get rid of the Virus. FBI Cash Pack Virus isn't most wild spread ransom ware virus which use the title of FBI scam targeted computer user into believing they are fined by the official http://guides.yoosecurity.com/how-remove-fbi-moneypak-virus-malware-that-blocked-pc-asks-for-payment-100-dollars/ organization. FBI Cash Pack Virus presents itself on your pc by fully taking over your display to prevent you from doing any operation on your pc and showing a fake message to you about which you are do prohibited action, once settled on the computer. This really is due to a sort of malicious software which we call it Win locker. It must be removed promptly to regain your operating system.

Mary J. Overby

Related Q & A:

What are good ways to save up for an iPod Touch?Best solution by wikihow.com
What are good ways to promote my website?Best solution by Yahoo! Answers
What are easy ways of writing a good essay?Best solution by Quora
What are good ways to get the "Last Second Bid" on eBay successfully?Best solution by ebay.com
What are good ways for personal fund raising?Best solution by wiki.answers.com

Just Added Q & A:

How many active mobile subscribers are there in China?Best solution by Quora
How to find the right vacation?Best solution by bookit.com
How To Make Your Own Primer?Best solution by thekrazycouponlady.com
How do you get the domain & range?Best solution by ChaCha
How do you open pop up blockers?Best solution by Yahoo! Answers

For every problem there is a solution! Proved by Solucija.

Got an issue and looking for advice?
Ask Solucija to search every corner of the Web for help.
Get workable solutions and helpful tips in a moment.

Just ask Solucija about an issue you face and immediately get a list of ready solutions, answers and tips from other Internet users. We always provide the most suitable and complete answer to your question at the top, along with a few good alternatives below.