S
| Item | Serial Number | Notes |
|---|
| Work Completed | Technician | Check-in | Check-out | Actual Hrs | |
|---|---|---|---|---|---|
| 1 | Server was hit with ransomware. unable to log into server. brought back the server to DSI office to restore from backup HDD. Last successful backup was on June 7th 5AM. All data from Friday to today will be lost. Receive confirmation from Lisa to proceed with restore. Will leave restoration to be completed overnight. Will continue on Sunday morning. |
Chu Hsieh |
06/08/2019 04:45 pm | 06/08/2019 06:38 pm | 01:53 |
| 2 | Overnight restoration successful. Backup was from June 7 5am. Scan server for virus. Install trial version of Malwarebytes. Scan clear. |
Chu Hsieh |
06/09/2019 08:30 am | 06/09/2019 09:30 am | 01:00 |
| 3 | Deliver the restored server to Brooks office. Asked Lisa to make sure all the workstations are not powered on. Lisa/Terry suspected Georgette PC was source of ransomware. Scanned both Lisa's, Georgette's, and Terry's and found minor infection but no detection of Phobos. Connected server to network and started to see issues with files being encrypted again with Phobos. Disconnected the server network and started to restore data from backup. Updated SonicWall TZ300 with latest firmware and disable RDS port forwarding. Work with Lisa on Geo-IP blocking and content filtering. Scanned all the workstation with Malwarebytes Business and remove all infections. One one PC that was used but Claire was infected with Phobos. Removed from network and will be brought back to office to be wipe and reinstall the OS. Will return to Brooks office at 10PM to see if restoration was successful and to check if server access is restored. |
Chu Hsieh |
06/09/2019 03:00 pm | 06/09/2019 08:00 pm | 05:00 |
| 4 | Check restoration status. Correct some issues on server. Install avg and malwarebyte. No infection detected. DebtMaster not running. Will check with Kevin in the morning |
Chu Hsieh |
06/09/2019 10:00 pm | 06/10/2019 12:00 am | 02:00 |
| Item | Serial Number | Condition | Qty | Price | Amount | |
|---|---|---|---|---|---|---|
| TOTAL ($) | 0.00 | |||||
| Date/Time | Comment | Tech |
|---|---|---|
| 06/10/2019 11:48 am | Updated status to Invoiced | Jessica L. |
| 06/10/2019 01:01 am | Updated status to Submitted for Invoicing | Chu H. |
| 06/10/2019 01:01 am | Approved. | Chu H. |
| 06/10/2019 01:00 am | Updated status to Pending Approval | Chu H. |
| 06/09/2019 04:53 pm | Updated billable hours to: 10.00 | Chu H. |
| 06/10/2019 12:52 am | Modified workorder. | Chu H. |
| 06/10/2019 12:52 am | Updated status to Service Completed | Chu H. |
| 06/10/2019 12:50 am | Modified workorder. | Chu H. |
| 06/10/2019 12:50 am | Updated Estimated Service Time (hrs) to 10 | Chu H. |
| 06/10/2019 12:31 am | Updated status to Submitted for Invoicing | Chu H. |
| 06/10/2019 12:31 am | Approved. | Chu H. |
| 06/10/2019 12:30 am | Updated status to Pending Approval | Chu H. |
| 06/10/2019 12:30 am | Service Completed | Chu H. |
| 06/09/2019 04:29 pm | Updated billable hours to: 06.00 | Chu H. |
| 06/10/2019 12:28 am | Modified workorder. | Chu H. |
| 06/10/2019 12:28 am | Updated status to Service Completed | Chu H. |
| 06/10/2019 12:28 am | Customer Signature Posted | Chu H. |
| 06/10/2019 12:27 am | Check-out 06/10/2019 12:00 am | Chu H. |
| 06/10/2019 12:27 am | Updated status to Scheduled | Chu H. |
| 06/10/2019 12:24 am | Check-in 06/10/2019 10:00 pm | Chu H. |
| 06/09/2019 09:31 pm | Check-out 06/09/2019 08:00 pm | Chu H. |
| 06/09/2019 09:31 pm | Updated status to Scheduled | Chu H. |
| 06/09/2019 09:23 pm | Check-in 06/09/2019 03:00 pm | Chu H. |
| 06/09/2019 02:28 pm | Check-out 06/09/2019 09:30 am | Chu H. |
| 06/09/2019 02:28 pm | Updated status to Scheduled | Chu H. |
| 06/09/2019 02:25 pm | Check-in 06/09/2019 08:30 am | Chu H. |
| 06/08/2019 06:41 pm | Check-out 06/08/2019 06:38 pm | Chu H. |
| 06/08/2019 06:41 pm | Updated status to Scheduled | Chu H. |
| 06/08/2019 06:23 pm | Arrived 06/08/2019 05:00 pm | Chu H. |
| 06/08/2019 06:23 pm | Check-in 06/08/2019 04:45 pm | Chu H. |
| 06/08/2019 06:22 pm | Updated status to Scheduled | Chu H. |
| 06/08/2019 06:22 pm | Assigned: Chu Hsieh | Chu H. |
| 06/08/2019 06:22 pm | Created workorder. | Chu H. |
| Filename | |
|---|---|
| W36588 | |