You might want to look at
iSecurity Anti-Ransomware for IBM i
https://www.razlee.com/anti-ransomware/
Gad
message: 5
date: Thu, 27 Feb 2020 16:09:04 +0000
from: Rob Berendt <rob@xxxxxxxxx>
subject: RE: IFS share /QIBM and /QIBM/ProdData/OS400/DirSrv
What amazes me is that some people do not believe that there can be such a
thing as antivirus software. Like how would antivirus software know that
the contents of a file are malicious or not.
This stuff has been around for decades.
Basically they rely upon three things: The software, the engine, and
pattern files. Software is updated infrequently. The engine a little more
often than the software. The pattern files are updated quite often.
Sometimes more than once a day. I have an icon in my 'tray' on my PC which
tells me that I'm running Trend Micro and what pattern file I'm currently
on. These are pushed out to all PC's from a central location.
Cool thing. Search the internet for the Eicar virus. It's a simple test
virus. You literally type it into a .txt file and try to save that .txt
file. When you do your antivirus will interrupt the save and pop something
up. The name of the file can be anything you want. Now if any .exe file
or anything has anything imbedded in it why is flagged by any of the
current pattern files it will be stopped.
I'm sure that if you had something like Powertech's loaded and installed on
your IBM i it would stop you from doing an EDTF '/home/SMEDLY/myfile.txt',
pasting the Eicar into it, and trying to save that file.
It's not that IBM i can be affected by a virus, but it sure can home them.
Ransomware is a different animal. Basically it's just file encryption but
you have to pay a ransom to get the key to decrypt it.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
------------------------------
midrange.com
