|
Computer Disc Audits 2006
|
|
Flash Drive Authorized 9-23-2006Flash Drive Configuration 9-23-2006 Total Files 6180 Folders 71 Size of Disc: 158,487,285 bytes Index Files: 16 Files Folder: 345,436 bytes 107thCongress 799 files folders Folder: 23,101,028 bytes 107th Congress Subfolders: Index: 14 Files HUD: 269 Files-Authorized Change Ike: 25 Files Jesus 87 Files-Authorized Change Mail 78 Files Service 287 Files USDA 39 Files HHSecurity: 2421 files Folder: 31 Size: 44,753,339 bytes HHS Subfolders: Index: 50 Files Spyware Act 361 Files NIMS: 1825 Files-Authorized Change Physics: 51 Files USDOJ: 50 Files USSI: 84 Files SSI Folder: 1106 files Folder: 59,577,764 bytes SSI Subfolders: Access: 169 files CA 34 Files Clinton: 191 Files FGJ: 270 Files-Authorized Change NC 95 Files TX 205 Files VA 115 Files NIMS2006: 1838 files Authorized Change-New Folder Size: 30,709,718 bytes |
CDRom Authorized 9-23-2006CDRom Configuration 9-23-2006 Total Files 6089 Folders 62 Size of Disc: 156,903,086 bytes Index Files: 16 Files Folder: 345,436 bytes 107thCongress 747 files folders Folder: 21,949,744 bytes 107th Congress Subfolders: Index: 14 Files HUD: 260 Files Ike: 25 Files Jesus 44 Files Mail 78 Files Service 287 Files USDA 39 Files HHSecurity: 2401 files Folder: 31 Size: 44,512,814 bytes HHS Subfolders: Index: 50 Files Spyware Act 356 Files NIMS: 1806 Files Physics: 51 Files USDOJ: 50 Files USSI: 84 Files SSI Folder: 1106 files Folder: 59,604,477 bytes SSI Subfolders: Access: 169 files CA 34 Files Clinton: 191 Files FGJ: 269 Files NC 95 Files TX 205 Files VA 115 Files |
USB Authorized Changes 6-24-2006Authorized File StructureUSB Configuration 6-24-2006 Total Files 4096 Folders 63 Size of Disc: 129,707,727 Index Files: 15 Files Folder: 581,402 bytes 107thCongress 752 files folders Folder: 23,164,090 bytes 107th Congress Subfolders: Index: 14 Files HUD: 261 Files Ike: 26 Files Jesus 45 Files Mail 78 Files Service 289 Files USDA 39 Files HHSecurity: 2493 files-Authorized change Folder: 31 Szie: 60,535,460 bytes HHS Subfolders: Index: 45 Files FGJ: 267 Files Spyware Act 356 Files NIMS: 1601 Files Physics: 52 Files USDOJ: 51 Files USSI: 86 Files SSI Folder: 836 files-Authorized Change Folder: 45,489,935 SSI Subfolders: Access: 169 files CA 35 Files Clinton: 183 Files NC 103 Files-Authorized Change TX 209 Files VA 115 Files ZWARC Folder Deleted Authorized Change This file was deleted because it contains executing files for music studies which in theory could introduce virus or spyware: Zwarc: 45 Files Folder: 11,481,109 bytes |
BSA Research #1 Destroyies CDRW #2 6-19-2005I deleted the contents of CDRW #2 and prepared to rewrite and the CDRW which is less than 2 weeks old appears to be toast. Librarian Ben Morgan examined the disc and explained even he could not fix it.
BSA Research #1 Abnormal CDRW #1 6-19-2005CDRW #1 copied however has many unauthozied files which are probally thumbs.db.Authorized File StructureCDRW #2 6-16-2006 Structure 4098 in 64 Folders 136,680,399 Bytes Index Files: 15 Files Folder: 581,402 bytes 107thCongress 752 files folders Folder: 23,164,090 bytes 107th Congress Subfolders: Index: 14 Files HUD: 261 Files Ike: 26 Files Jesus 45 Files Mail 78 Files Service 289 Files USDA 39 Files HHSecurity: 2447 files-31 Folders Folder: 54,132,578 bytes HHS Subfolders: Index: 45 Files-Authorized Change FGJ: 267 Files-Authorized Change Spyware Act 356 Files NIMS: 1601 Files-Authorized Change Physics: 52 Files Unauthorized Change USDOJ: 51 Files-Unauthorized Change USSI: 86 Files Unauthozied Change SSI Folder: 819 files Folder: 44,796,934 bytes SSI Subfolders: Access: 169 files UnAuthorized Change CA 35 Files Clinton: 183 Files Authorized Changes NC 84 Files Authorized Changes TX 209 Files VA 115 Files Zwarc: 45 Files Folder: 11,481,109 bytes |
BSA #6 Appears Abnormal CDRW #2 6-16-2005 11:45PMI copied the new USB flash drive to CDW and CDRW#2 on BSA #6 between 11AM and 12PM 6-16-2006 and have different file totals produced on the same machine which is BSA #6Authorized File StructureCDRW #2 6-16-2006 Structure 4107 in 63 Files 138,498,658 Bytes Index Files: 14 Files Folders: 342,940 bytes 107thCongress 752 files folders Folder: 23,164,090 bytes 107th Congress Subfolders: Index: 14 Files HUD: 261 Files Ike: 26 Files Jesus 45 Files Mail 78 Files Service 289 Files USDA 39 Files HHSecurity: 2447 files-31 Folders Folder: 54,132,578 bytes HHS Subfolders: Index: 45 Files-Authorized Change FGJ: 263 Files-Authorized Change Spyware Act 351 Files NIMS: 1601 Files-Authorized Change Physics: 52 Files USDOJ: 50 Files USSI: 85 Files SSI Folder: 849 files Folder: 44,377,941 bytes SSI Subfolders: Access: 169 files CA 35 Files Clinton: 221 Files NC 80 Files TX 209 Files VA 115 Files Zwarc: 45 Files Folder: 11,481,109 bytes |
BSA #6 Appears Abnormal CDRW Disc 6-16-2005 11:45PMI copied the new USB flash drive to CDW and CDRW#2 on BSA #6 between 11AM and 12PM 6-16-2006 and have different file totals produced on the same machine which is BSA #6UnAuthorized File StructureCDRW #0 6-16-2006 Structure 4111 in 63 Files 138,595,938 Bytes Index Files: 14 Files Folders: 342,940 bytes 107thCongress 752 files folders Folder: 23,164,090 bytes 107th Congress Subfolders: Index: 14 Files HUD: 261 Files Ike: 26 Files Jesus 45 Files Mail 78 Files Service 289 Files USDA 39 Files HHSecurity: 2447 files-31 Folders Folder: 54,132,578 bytes HHS Subfolders: Index: 45 Files-Authorized Change FGJ: 263 Files-Authorized Change Spyware Act 351 Files NIMS: 1601 Files-Authorized Change Physics: 52 Files USDOJ: 50 Files USSI: 85 Files SSI Folder: 853 files-UnAuthorized Change Folder: 44,475,221 bytes SSI Index 23 files Thumbs.db SSI Subfolders: Access: 170 files Thumbs.db CA 35 Files Clinton: 221 Files NC 80 Files Thumbs.db TX 209 Files Thumbs.db VA 115 Files Zwarc: 45 Files Folder: 11,481,109 bytes |
BSA Research #4 Suggest Problems With Thumbs DB 6-14-2005 12:30PMI copied the disc CDRW#1 and a CDR on BSA #4 and in the same session got 2 different file values. The added files are Thumbs.db which have created themselves in the folder ZCWARC. Thumbs.DB is a system file which helps windows see files. However an internal inspection in file editor of the 2 files suggest they may have malware similar to what has been seen in corrupted files.Authorized File StructureCDRW #1 6-12-2006 USB 4050 Files 62 Folders Bytes 133,546,141 CDRW #1 4050 Files 62 folders Bytes 133,546,141 bytes Index Files: 14 Files Folders: 342,940 bytes 107thCongress 752 files folders Folder: 23.164,090 bytes 107th Congress Subfolders: Index: 14 Files HUD: 261 Files Ike: 26 Files Jesus 45 Files Mail 78 Files Service 289 Files USDA 39 Files HHSecurity: 2390 files Folder: 54,180,061 bytes HHS Subfolders: Index: 244 Files Charity: 83 Files FBI: 37 Files FGJ: 266 Files FL: 10 Files Idaho: 41 Files NIMS: 1449 Files Physics: 52 Files USDOJ: 50 Files USSI: 85 Files WA: 21 Files SSI Folder: 849 files Folder: 44,377,941 bytes SSI Subfolders: Index: 22 Files Access: 170 files CA 35 Files Clinton: 221 Files NC 80 Files TX 209 Files VA 115 Files Zwarc: 45 Files Folder: 11,481,109 bytes |
BSA Research #1 Destroyies CDR 6-13-2006I made a copy of the system 6-13-2006 in the later afternoon and Research #1 has destroyied the CDR which should have appeared as below:UnAuthorized File StructureCDRW #1 6-12-2006 USB 4050 Files 62 Folders Bytes 133,546,141 CDRW #1 4050 Files 62 folders Bytes 133,546,141 bytes Index Files: 14 Files Folders: 342,940 bytes 107thCongress 752 files folders Folder: 23,164,090 bytes 107th Congress Subfolders: Index: 14 Files HUD: 261 Files Ike: 26 Files Jesus 45 Files Mail 78 Files Service 289 Files USDA 39 Files HHSecurity: 2404 files Folder: 54,915,293 bytes HHS Subfolders: Index: 244 Files Charity: 83 Files FBI: 37 Files FGJ: 266 Files FL: 10 Files Idaho: 41 Files NIMS: 1510 Files-Authorized NIMS:Index: 23 Files Thumbs.db Physics: 52 Files USDOJ: 50 Files USSI: 85 Files WA: 21 Files SSI Folder: 853 files Folder: 44,535,232 bytes SSI Subfolders: Access: 170 files CA 35 Files Clinton: 221 Files NC 80 Files TX 209 Files VA 115 Files Zwarc: 47 Files: 2 Thumbs.db Folder: 11,501,589 bytes |
BSA Research #1; BSA#7; USB Appear Normal 6-10-2006 9AM
BSA Computer #7 and #1 copies files from USB port to both CDRW#2 and a
CDR disc without error. A triple match on file size specifications gives
a very high probability of no errors or spyware. The changes in specific
folders are consistant with last authorized file check 6-06-2006:
Bytes 133,204,907 Index Files: 14 Files Folders: 342,940 bytes 107thCongress 752 files 64 folders Folder: 23.164,090 bytes 107th Congress Subfolders: Index: 14 Files HUD: 261 Files Ike: 26 Files Jesus 45 Files Mail 78 Files Service 289 Files USDA 39 Files HHSecurity: 2388 files Folder: 54,127,590 bytes HHS Subfolders: Index: 244 FilesAuthorized #1 Charity: 83 Files FBI: 37 Files FGJ: 266 FilesAuthorized FL: 10 Files Idaho: 41 Files NIMS: 1449 Files Physics: 52 Files USDOJ: 50 Files USSI: 85 Files WA: 21 Files SSI Folder: 849 files Folder: 44,814,595 bytes SSI Subfolders: Index: 22 Files Access: 170 files CA 35 Files Clinton: 221 Files+1 Authorized NC 80 Files TX 209 Files VA 115 Files Zwarc: 20 Files Folder: 11,481,109 |
BSA Research #1 Appears Abnormal 6-10-2005 4PMI came back and checked the disc at 4:30PM between USB port updated files on CLC #2 about 3:45 PM and BSA Research #1 at 4:30PM. The file differential suggest that during the course of the day BSA Research #1 has acquired sometype of spyware and is placing 11 more files that what should exist on CDRW#2:
|
BSA Computer 5,6, & Research #3 Maybe Infected with Spyware or Malicious Spyware? Dated 6-5-2006On these computer the total number of files transferred too or from CDRW or USB drives changes in some cases files disappear and in some cases we get more files than originally started:BSA Computer 6 BSA Computer 6 9AM File Structure 10AM File Structure USB Disc 4018 files USB 3891 Files 107thCongress Folder 107thCongress 750 files 623 Files Subfolder Subfolder hud 259 hud 259 ike 26 ike 26 jesus 45 jesus 45 mail 78 mail 78 service 289 service 281 usda 39 usda 39 hhsecurity Folder hhsecurity Folder 2383 files 2382 files SSI Folder SSI folder 851 files 851 files Zwarc folder Zwarc folder 20 Files 20 Files Index Files Index Files 14 14 CDRW Size CDRW Size 141,193,216 Bytes 138,2400,000 Dated 6-05-2006 2:33PM Dated 6-05-2006 10AM BAS Research #3 11AM Reload USB 4022 files 11AM 107thCongress Folder 761 Files Subfolder hud 265 **7 extra files ike 26 jesus 45 mail 79 **1 extra file service 291 ***3 extra files usda 40 * 1 extra file hhssecurity folder 2383 SSI Folder 852 *1 extra file Zwarc folder 20 Files Index Files 14 USB Size When Reloaded 142,819,328 Bytes Dated 6-5-2006 |
Computer Audit/Hacking Report CLC Monitor Station 6-5-2006 4PM
1. USB drive in use in CLC has about 1,000 files deleted out of the Washington State
emergency management folder-and missing computer files easily replaced from backup CD-Rom
|
Current Authorized File Structure Files 3786 @ 5-06-2006These files have been deactivated or tampered with in the SSi/Nc/folder edwards.jpg;lmr.gif. Zobel.jpg in folder 107thcongress/hud/convict has been deactivated.
|
Current Authorized File Structure 3929 Files @ 5-27-2006These files have been deactivated or tampered with in the SSi/Nc/folder white.jpg; edwards.jpg;angel.jpg;lmr.gif. The arnoldwilliams.jpg in HHSecurity/charity/index.html has also been tampered with.
|
Zip Disc Audit-UIW Campus 1/6/20061. Each disc when empty has available 95.7 million bytes 2. # Files on both Disc 3136 3. #Files Virus Scanner Shows: 3135 3. Space Used after file transfers: Disc 1: 93,020,160 Bytes Disc 2: 93,026,160 Bytes 4. # Bytes on Disc: Disc 1: 89,828,520 Disc 2: 89,828,520 5. Empty Space on disc: Disc 1: 7,411,712 Disc 2: 7,411,712 Zip Disc Audit-UIW Campus 2/10/2005Each disc when empty has available 95.7 million bytes Disc 1= 3205 Disc 2=3205 Index 69 Files 69 Files FBI 582 Files 582 Files FEMA 10 726 Files 726 Files Florida 559 Files 559 Files HUD 329 Files 329 Files Jesus 40 Files 40 Files Mail 70 Files 70 Files Service 95 Files 95 Files SSI 654 Files 664 Files USDA 34 Files 34 Files USDOJ 47 Files 47 Files 3. #Files Virus Scanner Shows: 3205 4. Space Used after file transfers: Disc 1= 92,610,510 Bytes Used Disc 1=7,821,312 Bytes Free Disc 2=92,604.416 Bytes Used Disc 2=7,827,,456 Bytes Free |