October 21st, 2004, 04:12 PM
Porn on my network. How to find it and get rid of it?
Recently a couple of users on my network were caught with inapropriate materials on their computers. Where there is one there are probably others, so we began digging through more user's machines and found even more. Go figure.
I am looking for a utility or something that I can use to scan my user's computers remotely for images and video. If it can be automated, then that is even better.
Has anyone else had to deal with this kind of problem before?
October 21st, 2004, 04:30 PM
just do a file search for mpg's & stuff and jpg's & stuff. do it after hours so it doesn't bog down your server. if you use roaming profiles, you can also search for links and cookies to bad sites on the server.
over the years i have found some staff with this junk at work. warez as well. i just delete it automatically. i find that bringing it up with managers usually becomes a bigger hassle than it's worth. (i am in a unionized workplace. god help you if you get the union on your back!). you also sometimes get the 3rd dergee, "how much do you spy on staff!!"...blah blah... and if you have a policy - they will throw it back at you and accuse you of not doing a good enough job of promoting user awareness & policy awareness & stuff. all in all, causes big hassle.
anyways, not the kind of crap one wants to get into at work. there are too many other more important thing to do.
October 21st, 2004, 04:39 PM
If your company's willing to drop some cash, I highly recommend EnCase Enterprise Edition.
EnCase Enterprise Edition is a powerful network-enabled incident response system that provides immediate and thorough forensic analysis of volatile and static data on compromised servers and workstations anywhere on the network; without disrupting operations.
My experience is only with EnCase Forensic Edition (which I love) but EEE is highly regarded, and I've heard nothing but praise from my colleagues who use it.
Downfall: It's pricey.
That's Officer 11001001 to you...
Now you see me | Now you don't
"Relax, Bender; It was just a dream. There's no such thing as two." ~ Fry
sometimes my computer goes down on me
October 21st, 2004, 04:43 PM
We have been mapping to the user's hard drives and doing searches that way but it is very time consuming and we have been short handed lately. Automation would greatly help in our case. We do not use roaming profiles here, profiles are restricted to the machines that the users log into.
I"m not too worried about unions here. The users all sign a network use policy and also complete a computer based trainign course regarding acceptable use. I got plenty of ammo.
Our boss is super PO'd about finding this crap on our network but due to the number of users involved, we just want to get the our machines (about 120) clean and start fresh. After this there will be no more chances or excuses heard.
October 21st, 2004, 04:51 PM
If what you have been seeing is a large size of the hard drive being taken up we used a program called treesizepro What it does is allow you to locally or remotely scan the hard drive for the largest folders/files.... the best part is it will search all formats including hidden files and folder. This worked great for us because it will list everything and you dont really have to login to the comptuer.
Duct tape.....A whole lot of Duct Tape
Spyware/Adaware problem click
October 21st, 2004, 05:11 PM
Grab a sniffer. As just a start alone... I would be filtering out based on certian keywords, block access to sites with a certian number of images/links this would of course in turn kill off almost any porn gallery worth browsing, they all put 'em up in mass quantities but just in case im sure you could even filter out based on the size of the images & of course movies wouldn't be office documentation .
If your anti-porno thing is so important then why don't you just talk to someone who is most likely a good 80% of your problem... and probably should have been doing what some of your policies and agreements talk about in the first place, and thats watching out what goes on in the network... and by that, I am reffering to your lan-man.
October 21st, 2004, 05:43 PM
Just to update. We have no control over the firewalls and filtering. That is already taken care of by another group of folks. I am the lan-man for the local network in our building. I have been tasked to implement a scanning policy just to keep an eye on things. So we will be scanning a couple of comps per week. Just to keep them on their toes and to let the users know that "the Man" is watching.
Surprisingly, this was never an issue before, or at least since I've been here.
October 21st, 2004, 05:50 PM
You might also try Content Watch (free scanner for porn)
ContentAudit is a free online tool that safely checks your PC for explicit or other unwanted content picked up from the Internet.
N00b> STFU i r teh 1337 (english: You must be mistaken, good sir or madam. I believe myself to be quite a good player. On an unrelated matter, I also apparently enjoy math.)
October 21st, 2004, 06:14 PM
Hrm... I bet if I clicked on that link my computer would unintentionally cause a denial-of-service attack against their system.
October 21st, 2004, 06:17 PM
CXG: ContentWatch sounds awfully familiar. Doesn't that have malware deep inside of it? I could have sworn I heard that it contains a form of spyware/adware.