lock down users ability to load programs, shut down scripting at the browser level
any app loading is for the it dept not end users
you may have to reformat at a starting point to get a clean network
how many are we talking about hundreds of computers your task is daunting
shut down all work stations format server all servers even the mail server
then start formating the work stations
of course all of this is time consuming but your
hack was meant to be that time consuming to fix
if you keep a time table to format work stations
on a regular basis your network will keep a little cleaner
it may be loading remotely
after the big format monitor incoming and outgoing traffic network wide for any hack attempts
it may be hid under a known AP name making locating impossible
I know formatting the whole shabang really hurts the companies bottom line but until operators learn proper usage of their tools you will always have one guy in the bunch ready to open that one email that takes down the entire network
I was lucky I caught the virus/Trojan running a muck in my network while I was doing an all nighter on a rendering It Only Hit 3 Of My Work Stations
well the company I saved from this trick let me go 2 years later due to my not letting them the company use bogus softwares os's and app's without licenses the rats lol 8(
still looking for work lol maybe I'll drive a potato chip truck and be had with this it stuff
no one will understand your fix and blame you for any lost time but it will clan any network of ANYTHING formatting and reinstalling the os and app's whips out any damage done after an attack
I have another way to keep things running but it involves apple lol mac the evil nemesis of microsoft linix rules
