DarkcometRAT53

[Smee]

One of our students is telling everyone he has their ip address and can block their internet access at home. hes also boasting that he can "shut the schools network down" I've had a look at his school account and the only thing I've found is this DarkcometRAT53. is it something I should be worried about? He can't bring anything in on memory stick as we've recently stopped students bring them in. Hes a year 6 student.

thanks

[Steve21]

DarkComet's an old remote trojan, but you need it installed by an admin (well UAC wise) in the first place, that on it's own is enough reason to hammertime him

 

Steve

[Smee]

He can't install it, its just sitting in his my docs with other exes that make he thinks make him look big to his classmates!. I have no idea how he's managed to get it onto his my docs so will have a look around and see who else might have similar stuff.

[Steve21]

Well unless you're blocking all downloads etc, any random zip'd download could contain an exe even without memory sticks etc

 

Personally I'd ninja copy, fire up a VM that's got no network and run it and see if it's a real version, if so that's more than enough reason to ban him off the network if he's bringing it in whether running it or not

 

Steve

[Oaktech]

Banhammer and interrogate. You need to know if your dealing with a threat or a loudmouth.

[bald_pig]

Have a word with your school's friendly police liason officer, I've seen that having a student sat down by a couple of officers and being reminded of the computer misuse act can be quite effective...

[Smee]

He's just a cocky little so and so. I've just had him in front of his class and read him the riot act in a very calm controlled way. More effective than full on Thunder so I've been told

Will have a word with our police liaison officer too.

thanks guys

[Oaktech]

More effective than full on Thunder so I've been told

 

I'm not angry, but I'm very disapointed... etc, etc...

 

[Smee]

oh no I'm not that subtle. (I do have 3 grown up sons who that still works on though lol) I read him the full riot act, School network security, AUP etc etc but I keep my voice very low and level and fix them with a mum stare!!!!