Mike Moratz-Coppins wrote:
When removing malware of one sort or another,
<SNIP> Hi, IMHO, anytime, repeat ANYTIME, you have an infected box, it is < 0% trustworthy. You can remove the malware, but how do you know that you found everything? You don't. Especially if the malware is some sort of downloader or spyware. Infected system? Back up the data, and ONLY the data, then (to quote Microsoft from RSA a couple of years ago) "Nuke it from space!". Bottom line: It is impossible to give any reasonable assurance that a box that was infected has been cleaned. Best solution: Never store use data on a client system (so you have nothing to back up) and simply reimage any suspect system (ZenWorks, Ghost, etc.). I have some clients that reimage every desktop every weekend just for good measure. Jon Kibler -- Jon R. Kibler Chief Technical Officer Advanced Systems Engineering Technology, Inc. Charleston, SC USA o: 843-849-8214 m: 843-224-2494 ================================================== Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email.
