Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

RE: More along the lines of malware disinfection

Subject: RE: More along the lines of malware disinfection
Date: Fri, 28 Mar 2008 11:55:37 +1000
As they used the machine for work and personal banking

That's a very important point here-scale of the client is sometimes
important in deciding how to approach a job. Ie smaller, home-based customer
wants to pay less, have things more convenient and worries little about
security (hang on, that sounds like some big customers too!)
Whereas businesses rely on their systems having a higher level of security
management.
However, if you ask 'little' people if they do banking and personal work on
the machine and they say 'Yes,', I'm sure they will want to know that it is
as secure as possible.

I had a friend whose machine I had to nuke/reinstall because she had some
spyware that was autodialing every time she booted and removing it seemed to
do the trick but she didn't want to take the risk-because she had already
seen how her phone bill had been affected. 



-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of Colin Copley
Sent: Wednesday, March 19, 2008 7:52 AM
To: Mike Moratz-Coppins
Cc: focus-ms@securityfocus.com
Subject: Re: More along the lines of malware disinfection

Mike Moratz-Coppins wrote:
Purely monetarily speaking, I love the idea of reinstalling every
machine that gets a virus.  I
might have earnt about 4 times more money than I have to date running my
business, however I don't
think customers would appreciate their computer install being nuked
every time they have a malware
issue.  I would say that so far I've done about 50 installs of Windows
(computer building aside)
whereas I have attended about 200 appointments where I have removed some
form of malware from a
computer.

Hello
Recently I was setting up wireless for a customer.  Found a piece of
malware vb.cc I think. checked
hosts, registry, accounted for any processes I didn't know, ran anti-
virus, rootkit revealer,
couldn't see any further signs of compromise, and the PC ran as well as I
might have expected,
broadband running fine too.  I informed the customer anyway of the risks,
feeling bad like I was
fishing for more work I told them they were probably perfectly safe but
couldn't be 100% without
doing more work or a full service on the box.  And left it up to them.

As they used the machine for work and personal banking they preferred a
full service (should always
work better after a clean rebuild anyway).

5430 infected files.

Kind Regards
Colin

<Prev in Thread] Current Thread [Next in Thread>