Re: More Before-The-Fact-Isms II, blocking viruses and spyware thr

From: Karl Levinson [x y] mvp (levinson_k_at_despammed.com)
Date: 01/22/05 

Date: Fri, 21 Jan 2005 22:03:17 -0500

"Gordon Fecyk" <gordonf@pan-am.ca> wrote in message
news:uQb2KNBAFHA.1564@TK2MSFTNGP09.phx.gbl...

> Ah-hah. "If a virus is able to execute..." That's what I'm trying to
> prevent!
>
> The key is keeping malicious code at bay. I'm able to do that right now,
> just with the tools included in Win2K, Exchange 2K and Office 2K. When
> virus writers and spyware writers finally catch up I want to be ready, and
> that means keeping all unauthorized code (whether it's known to be
malicious
> or not) at bay.

Great. I still think that in addition to hardening ACLs [which is not such
a bad idea as long as you find it saves you more support effort than it
causes you to expend], you should look into programs that white-list what
executables and scripts are permitted to run, like SecureEXE from
www.securewave.com or FreezeX / Deep Freeze. These sound right up your
alley, although they are not free.