[pchelpers] Re: user accounts and malware removal

Hi John,

Monday, August 29, 2005, 3:05:47 PM, you wrote:

JD> The passive scanning method I use gets around this by treating the
JD> whole drive as data, or just one account. I sympathize with your
JD> problem. At present, this is what people need these kinds of
JD> techniques for.

For spyware and the like, the passive approach doesn't allow you to
check in the registry for odd stuff that should not be there and which
can cause malware to get reinstalled. For example, your search page
could be set to point at a site which would reinstall the malware, and
then pop up your usual search site.

Further, it doesn't help Joe Blow on the street keep his or her system
clean (who won't even be able to do it this way, assuming that they
know how to do it), nor does it help big-company-sysadmin, who needs
to clean a large number of computers of an infestation that got in
before signatures were updated to recognize it.  Thus, there is a
definite need to be able to clean a system as much as possible while
it's live.

-- 
Scott.




-- 
-------list-services-below-----------
Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig>
Freelists login at http://www.freelists.org/cgi-bin/lsg2.cgi
List archives at http://www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Latest news live feeds at http://modecideas.com/indexhomenews.htm?sig
Good advice is like good paint- it only works if applied.

Other related posts: