>       Can you run IE in a VM? This way, you can just make a copy of the
> VM, run IE, then trash the copy.
>

I actually did that back when Panda software was selling a new Gateway unit
that was supposed to scrub all Internet source viruses, spyware, adware,
etc., before those signals it made it to a network.  They sent me a demo
unit ($8,500.00 unit) to evaluate for some clients (2 years ago or so).
Rather than put my own machines at risk I set up a VPS using 2000 Pro with
all the latest patches, installed and ran several antivirus & malware
software applications to ensure the VPC was clean.

I then removed all antiVirus/antiMalware software, running absoutely no
antivirus or malware protection (the Panda Gateway was supposed to intercept
all those).  I then apologized to Lynda, lit up IE6, and started surfing all
kinds of sites reknowned for malware being stuffed in every nook and cranny
(yes, including some porn sites <g>.  It was for research, y'all!).  After
several minutes I got one hit from the Panda system alerting me to a threat
it intercepted.  I think I kept going until I saw a few more that were
detected.

After my on-line ordeal, looking to get the VPC nailed with problems I
installed (in order) Spy Sweeper, Pest Patrol, Spybot and Ad-Aware.  After
the Panda unit had found only a few hits, the software solutions found over
500 infections had made it through the Panda Gateway!  After the experiment
was done I simply deleted the VPC, with no harm done to my physical machines
(the Host PC DID have Symantec AntiVirus Corporate running on it).  Worked
like a champ.

Panda received their demo unit back within a few days.  The Sales Manager
asked if I would consider buying it if they promised to correct all the
deficiencies.  Gawd, I guess he thought I was born yesterday or something.
I told him from the beginning this was an evaluation, if their unit did a
decent jop intercepting Malware I could assure him of several units being
sold.  But if it did not perform at least reasonable well he would not have
a 2nd shot at my business.  He assured me the unit was ready for prime time,
and before I ran it I made certain I had all the latest updates for the
unit.


Gil

> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Ed Leafe
> Sent: Monday, April 02, 2007 12:02 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [NF] Visting selected sites with IE 6 or 7 infects your
> machine
>
>
> On Apr 2, 2007, at 11:20 AM, mrgmhale wrote:
>
> > My greatest fear is passing an infection to a client, my 2nd greatest
> > fear is losing data, my 3rd greatest fear is getting infected
> > despite all
> > the protections I have in place.  And all those fears are just
> > about at the
> > same level.
>
>       Can you run IE in a VM? This way, you can just make a copy of the
> VM, run IE, then trash the copy.
>
>       I did that once when I first got XP installed on my Mac. I
> backed up
> the VM, and then used IE to go to a warez site. Within two minutes I
> had popups all over the place, and I couldn't even manually type in a
> URL in the address bar. Rebooting and cleaning all the caches,
> running A/V scans, etc., did nothing.
>
>       I trashed that VM, made another copy, and then went to the exact
> same site using FF. Nothing happened. Guess that's why some people
> like IE better: it does so much more!
>
> -- Ed Leafe
> -- http://leafe.com
> -- http://dabodev.com
>
>
>
>
[excessive quoting removed by server]

_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: http://leafe.com/archives/byMID/profox/[EMAIL PROTECTED]
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.

Reply via email to