Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Incidents
[Top] [All Lists]

Re: IE Malware / Spyware Control Methods

Subject: Re: IE Malware / Spyware Control Methods
Date: Fri, 7 Jan 2005 12:25:25 -0800 (PST)
i use a combo of all these ideas.   sucks...but what
are you going to do.   trying that beta winders
anti-spyware.

anyone konw anything about that?

'bout time MS

..
--- Gary Baribault <gary@baribault.net> wrote:

The first obvious answer is to follow many people's
lead and go with
Firefox. I have replaced IE on many customer's
installations. 

The next solution or in combination with the first
is to create Ghost
images and just ghost people's machines when their
beyond repair.

Gary B


On Fri, 2005-01-07 at 12:37 -0500, Illuminatus
Master wrote:
Hello List,
 I'm sure you all realize the growing threat of
malware and spyware to
Internet Explorer. It has been my experience that
the initial
infection and/or removel of an infection by
anti-spyware products can
permanently damage a windows workstation. This
damage occurs in many
forms and often leads too the workstation being
reformatted and
rebuilt before going back into service.

A recent example is earlier this week, in spite of
content filtering,
a workstation was infected with "wintools",
"mysearchtoolbar" etc. The
tough part of this is that such malware has
multiple instances/threads
and renames system files like msconfig to resist
removal. Often
IE/Windows is so damaged it's more time effiecient
to just replace the
box and rebuild the infected one.

My question is this, I'm batting around the idea
of using Group Policy
in our Active Directory to  try and choke IE down
to the point where
such Malware has trouble installing itself. Has
anyone here ever tried
such as this with any degree of success?

Other than Group Policy I'm also considering
deploying an alternate
web browser that isnt subject to malware infection
but doing so
complicates my patching/reporting routine for our
security audits.

I look forward to your comments and idea's.

Thanks,
massa






                
__________________________________ 
Do you Yahoo!? 
Read only the mail you want - Yahoo! Mail SpamGuard. 
http://promotions.yahoo.com/new_mail 

<Prev in Thread] Current Thread [Next in Thread>