Linked by Thom Holwerda on Tue 4th Apr 2006 18:53 UTC
In a rare discussion on the severity of the Windows malware scourge, a Microsoft security official said businesses should consider investing in an automated process to wipe hard drives and reinstall operating systems as a practical way to recover from malware infestation. "When you are dealing with rootkits and some advanced spyware programs, the only solution is to rebuild from scratch. In some cases, there really is no way to recover without nuking the systems from orbit."
Permalink for comment 111636
To read all comments associated with this story, please click here.
Once a *nix system has been rooted, the only way to be *SURE* you are clean is to wipe and reload.
Sure, you could remote the drive in rescue mode or something to remove cloaking, but even then, are you *sure* you found everything?
Really?
If you just answered yes twice, then you are naive, and I'm glad you aren't admin to any of my systems. Yes, Unix/Linux tools are far superior, and yes, they are much, much more secure. Oh, and yes, the reliability is legendary. No, I don't have problems with viruses. I've kicked out black hats on more than one occasion, and generally had good results.
But, once you are rooted, the best thing to do is to prepare a replacement ASAP. It's not just the system files - *ANY* script or file on the system is potentially untrustable, and all it takes is a *single* file out of place, and you potentially right back at square one.
Member since:
2005-10-25
Once a *nix system has been rooted, the only way to be *SURE* you are clean is to wipe and reload.
Sure, you could remote the drive in rescue mode or something to remove cloaking, but even then, are you *sure* you found everything?
Really?
If you just answered yes twice, then you are naive, and I'm glad you aren't admin to any of my systems. Yes, Unix/Linux tools are far superior, and yes, they are much, much more secure. Oh, and yes, the reliability is legendary. No, I don't have problems with viruses. I've kicked out black hats on more than one occasion, and generally had good results.
But, once you are rooted, the best thing to do is to prepare a replacement ASAP. It's not just the system files - *ANY* script or file on the system is potentially untrustable, and all it takes is a *single* file out of place, and you potentially right back at square one.