21 Sep
2004
21 Sep
'04
3:09 a.m.
On Tue, 21 Sep 2004, John Foust wrote:
But spyware tools are nowhere where they need to be.
I'd love to
have a boot CD that would let me scan and clean without needing to
actually install and clean on the infected system, as well as tools
that could operate on a non-active non-booted hard disk in the system.
All of today's tools are focused on running live in the infected
system in order to scan the registry, BHOs, and processes
running in the system.
It helps to boot into Safe Mode (with networking enabled). I fought one
particular bit of spyware that would regenerate itself 10 seconds after
you deleted it's files. I searched and searched and searched and found
nothing about it on the web, and so assumed it was some newfangled alien
technology from the future.
I finally had to boot into Safe Mode and manual crawl through the registry
deleting every last bit of evidence of its existence. What a pain in the
ass that was. HijackThis! would have been helpful if I'd known about it
then.
--
Sellam Ismail Vintage Computer Festival
------------------------------------------------------------------------------
International Man of Intrigue and Danger http://www.vintage.org
[ Old computing resources for business || Buy/Sell/Trade Vintage Computers ]
[ and academia at www.VintageTech.com || at http://marketplace.vintage.org ]