>work at one of the biggest Universities in the World
>we get a "virus"
>entire shared drive taken offline
>it'll be back tomorrow
>1 week later still nothing
Is this normal... I heard it is CryptoWall. Shouldn't any competent IT team be able to just roll back to a backup in less than a week?
A) backups are on a mounted drive of the infected system
B) backups are on tape/cold storage
result: longass time to implement backup
C) no backups
You should know that many universities hire internally from a pool of their own students to support their IT operations.
So, you generally have a bunch of CS/CE students managing day to day operations that don't know jack shit about networking, storage, or server administration.
I'm a consultant, so I have to clean up a lot of the messes these fucking idiots make.