Printable View
Reading about the new bagle varient in the the article here:
http://www.enterpriseitplanet.com/se...le.php/3385611
I was left with a few questions. It states that it attempts to shutdown your AV and your firewall applications. Which leads to my question and that is if the virus can shutdown the firewall applications, can it also shut down firewalls built into routers??
Uber Duck,
I am not an expert in this field but I believe that attacking a router (a hardware device) is far more complex than just looking for the known running processes of AV and firewall software, and shutting them down.
AFAIK, routers can be compromised, but it is pretty rare.
just my thoughts
This variant goes after desktop/server client based AV solutions, not appliance/HW firewalls or AV scanners.
--TH13
most virus/worms that do this incluse a kill command to terminate processes. they loop threw a list of av process names using that command. the only way this could affect a hardware f/w or router is if it somehow got into its os and if the box supported the method.
Thanks for the replies!
How can a virus get into the OS of a HW firewall/router? Can you even reach the OS of it? Or is it just ran from some HW chip that you can't configure? I know you can configure routers but that's from a GUI in windows... :confused:
exactly my point!
even if it were written as a flash up-date to the routers os it would still require someone to execute it on the inside and know the user name and password for the router. as long as you keep your router updated i dont think there's much to worry about (now watch a 0day come out for routers)
And it doesn't touch anything that does remote IDS or remote AV scanning...
Ok, now I understand :cool: . Thanks for the help!
There is lots of variants of bagle.
plain
wheat
multi-grain
pizza
with lox
jalepeno
sesame seed
sour dough