[pchelpers] Re: user accounts and malware removal

The passive scanning method I use gets around this by treating the whole 
drive as data, or just one account. I sympathize with your problem. At 
present, this is what people need these kinds of techniques for.

Ekhart GEORGI (last name last) wrote:

>Hi Scott
>
>  
>
>Well, actually no, or rather yes. The problem is not with the computer i 
>was cleaning but with a large part of the security program industry. 
>Even worse, even many of the independent experts didn't know about the 
>multiple user account problem.
>
>I thought i had been very naive because i'd been helping many people for 
>several years with infested computers and didn't know that many 
>antimalware programs need to be rerun on each user account, but i was a 
>bit relieved that this quite unbelievable shortcoming in many 
>antimalware programs is or at least was unknown to many real gurus who 
>previously helped hundreds of people. I cannot imagine how it is 
>possible that these gurus didn't notice the need to advise users to 
>rerun the cleanup programs on each user account. The fact that the 
>programs' vendors don't know this either or at least don't include it in 
>their manuals (or make the program remind the user after a scan to 
>repeat it on the other accounts!) is almost as unbelievable, despite all 
>the greed involved in the development and sale of commercial cleanup 
>programs. I'm very interested whether this is also a problem in the 
>altruistic program Spybot.
>
>So now i don't feel so bad that i didn't help some people adequately 
>here on PChelpers. Now we know why some members of this email list had 
>problems with trojans and other malware coming back despite cleaning 
>their computers with several cleanup programs. I don't remember anyone 
>ever recommending rerunning the cleanup programs on other accounts, but 
>maybe somebody did advise that very rarely.
>

>-- 
>Regards, John Durham <http://modecideas.com/contact.html?sig>
>ICQ number 112663246
>Fax/Phone 64 4 5286786
>Award winning web site at http://modecideas.com?sig
>PC-HELPERS list subscribe/unsub at http://modecideas.com/index.html?sig
>Good advice is like good paint- it only works if applied.
>
>  
>


-- 
-------list-services-below-----------
Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig>
Freelists login at http://www.freelists.org/cgi-bin/lsg2.cgi
List archives at http://www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Latest news live feeds at http://modecideas.com/indexhomenews.htm?sig
Good advice is like good paint- it only works if applied.

Other related posts: