Free Republic
Browse · Search
General/Chat
Topics · Post Article

To: Knitebane
The problem with "restoring" owned machines is that you can't ever be sure that you got everything.

My experience is otherwise. I don't completely trust malware scanners, but restoring executables and the registry removes active malware. You can then clean any infected files, because they're orphaned.

53 posted on 02/02/2009 1:47:15 PM PST by js1138
[ Post Reply | Private Reply | To 47 | View Replies ]


To: js1138
My experience is otherwise.

The plural of "anecdote" is not "facts".

Besides, Microsoft disagrees with you.

You can’t clean a compromised system by removing the back doors. You can never guarantee that you found all the back doors the attacker put in. The fact that you can’t find any more may only mean you don’t know where to look, or that the system is so compromised that what you are seeing is not actually what is there.

The only way to clean a compromised system is to flatten and rebuild. That’s right. If you have a system that has been completely compromised, the only thing you can do is to flatten the system (reformat the system disk) and rebuild it from scratch (reinstall Windows and your applications).

54 posted on 02/02/2009 2:07:08 PM PST by Knitebane
[ Post Reply | Private Reply | To 53 | View Replies ]

Free Republic
Browse · Search
General/Chat
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson