Re: What to do with spyware *loaded* PC?
From: Lars M. Hansen (badnews_at_hansenonline.net)
Date: 01/31/05
- Next message: Security Alert: "SSRT5902 rev.0 Apache 1.3 on VirtualVault potential remote Denial of Service (DoS) and execution of arbitrary code"
- Previous message: Walter Roberson: "Re: What to do with spyware *loaded* PC?"
- In reply to: walterbyrd_at_iname.com: "What to do with spyware *loaded* PC?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 31 Jan 2005 06:59:25 -0500
On 30 Jan 2005 15:36:52 -0800, walterbyrd@iname.com spoketh
>Suppose a good friend or family member brings you a PC loaded with
>spyware, and asking for your help.
>
>What is the best way to clean up the PC, and keep it clean?
>
>Usually I completely rebuild the system: backup, format, re-install.
>Then I install updates, AV software, spybot, ad-aware, and cwshreader,
>and show them how to use the anti-malware software. I also try to get
>them to switch to firefox, with mixed success. It's time consuming, but
>it's fairly sure.
>
>I've tried just running the anti-spyware software, and manually
>cleaning out the registry. I've tried spybot, ad-adware, cwshreader,
>spyweeper, and symantec. It seems like I can never quite get it all.
>And if the tiniest bit of spyware stuff is left, I might as well have
>not done anything. Also, this method is not exactly quick, symatec
>especially runs forever. Also, it's very easy to accidently remove a
>valid file and totally screw up your system.
>
>Although rebuilding works, there are some serious problems. The time
>I've already mentioned. Also, often people do not have all their
>software applications, or drivers. I have also know people to put their
>valuable data in remarkable odd places - there is nothing I have like
>accidently deleting important data.
>
>Any advice?
There are two options: Clean it or wipe it.
And it seems that you've pointed out the pitfalls of both.
What makes you think that the "tiniest bit of spyware" is left on the
computer after you cleaned it?
To keep it clean, you'll either need to teach them to practice safe hex,
or you'll need to take away the major avenues used for malware
installation. Install alternative web browsers and e-mail clients if you
don't think that they can use IE or OE safely.
Install Spybot S&D and immunize the system. Install Microsoft's
Anti-Spyware Beta and leave that resident.
Lars M. Hansen
http://www.hansenonline.net
(replace 'badnews' with 'news' in e-mail address)
- Next message: Security Alert: "SSRT5902 rev.0 Apache 1.3 on VirtualVault potential remote Denial of Service (DoS) and execution of arbitrary code"
- Previous message: Walter Roberson: "Re: What to do with spyware *loaded* PC?"
- In reply to: walterbyrd_at_iname.com: "What to do with spyware *loaded* PC?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|