It seems the system computer is infected with a virus; please help!
Thread Content
Recently, whenever the computer running the DCS system is turned on, a warning window from Symantec antivirus software appears, stating that the W32.Downadup.B virus has been detected and successfully isolated. After checking online, it turns out to be a worm virus. Has anyone encountered this issue? How can it be resolved? The antivirus software reports an infection every day; it clearly doesn’t eliminate the threat completely – it can only isolate it. I’m looking for a solution! What methods do everyone use to transfer data between public networks and DCS networks? We use USB drives with protection switches and are very careful, yet we still get infected. How do others handle this? Thank you!
This post was last edited by lovelife1997 on 2018-5-27 at 11:40. The correct approach is as follows: 1. The computers in the DCS/SCADA systems should not be connected to the Internet, nor should they be connected to the internal network; this should be an agreed-upon principle from the time the plant is built. 2. For computer operations on the DCS/SCADA system, individual user accounts and passwords are used, with each person logging in using their own account. The operator only has the permission to view and modify some data, with no other rights. 3. It is strictly prohibited for any staff member to insert USB drives or hard drives into the computers of the DCS/SCADA systems; external mobile storage devices may only be used by authorized engineers, or with written authorization from an engineer and under the supervision of the control center’s on-duty supervisor. And record the behavior and purpose in the daily work log. 4. For virus updates to DCS/SCADA systems, only engineers authorized at the engineer station can take the update package, analyze and scan it for viruses, and then apply the update manually using a storage medium. 5. Personnel who are not part of the control center, whether employees or staff, are strictly prohibited from entering unless they have received written authorization and a signed record thereof. The main entrance of the center uses real-name access cards.