Interactions of AntiVirus and MBlaster/Lovsan-A & Stealther

[Jim Moore <jhmfa () RIT EDU>]

I am trying to understand how far Stealther and MBlaster/Lovsan-A get
before the latest antivirus intercpts them.  What has alarmed me is that
I have some reports of a reboot preceding the A/V warning.

Also, I am assuming that the most effective is when A/V is set to scan
on every write.  However, you know that impacts performance and a lot of
people slide back to scanning at lunch time, or in the evening.  I
assume that means that is then the window of opportunity for MBlaster.

I am not an A/V expert, can someone validate assumptions, and describe
how you handle it in communication to your end user community?

Jim
--
--
Jim Moore, CISSP, IAM
Information Security Officer
Rochester Institute of Technology
13 Lomb Memorial Drive
Rochester, NY 14623-5603
Telephone: (585)475-5406
Fax:       (585)475-7950

PGP (jimmoore () mail rit edu): 9C33 0328 CD59 B602 82B8 8521 0DC9 963C D0C0

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.