Security Basics mailing list archives

Re: Spyware drama!


From: "Stimpy" <st1mpy () planetinternet be>
Date: Sat, 10 Jan 2004 17:35:34 +0100

-----BEGIN PGP SIGNED MESSAGE-----

Try to make a script that mount C$ share for every PC and the run an
ad-aware thing on all drives.
I don't know if u connect to a remote registry with regedit or via
script/Windows API's if ad-aware checks it too.


Stimpy
- ----- Original Message -----
From: "Reinaldo UOL" <rabarbaro () uol com br>
To: "Francisco Mário Ferreira Custódio" <fcustodio () eda pt>
Cc: <security-basics () securityfocus com>
Sent: Thursday, January 08, 2004 9:04 PM
Subject: Re: Spyware drama!


Try SPYBOT Search & Destroy - if i'm not confused, there's a link
in the pages to a net tool that does it. By the way this tool is
excellent (in my opinion - ok) for stand-alone micros. And it has
many translations (portuguese included).

But see also FAQ # 026 (on the spybot search & destroy's help to
have a more explaned question answered about the
advantages/disadvantages of doing such scan using a server ok)
(it's also translated to portuguese (of brazil)) :-) - enjoy !!!

P.S. - A suggestion either - Try to have an explanation (and know
what are the skills/tools that you have to take) on blocking and/or
filtering content perhaps using a PROXY and ROUTER/NAT. I'm NOT a
security expert but there's a lot of them here in the lists of
Security Focus...

You can also visit and join (and question your doubts) in the
"REDEWAN" list. (It's a list moderated about
routers/switches/bridges, admin's policy, security, etc...
manteined by Gilberto Biasotto in PORTUGUESE.

Regards (abraços para os colegas da "Terrinha").

----- Original Message -----
From: "Francisco Mário Ferreira Custódio" <fcustodio () eda pt>
To: <security-basics () securityfocus com>
Sent: Monday, January 05, 2004 4:07 PM
Subject: Spyware drama!



Hey everybody!

I am having lot's of traffic in my network, due to those boring
spywares that my "dear" users install everyday. I use "ad-aware
pro" to clean the workstations, but I have 500+ workstations on
my network...

So I want to know if you guys ever eard about a tool to
scan/clean "spyware" by IP address. Like...providing an admin
password, the software would sweep a class C
network...scanning/cleanning every machine on it.

Thank you all.

FC

------------------------------------------------------------------
---------
------------------------------------------------------------------
----------



--------------------------------------------------------------------
------- Ethical Hacking at InfoSec Institute. Mention this ad and
get $720 off any  course! All of our class sizes are guaranteed to
be 10 students or less.  We provide Ethical Hacking, Advanced
Ethical Hacking, Intrusion Prevention,  and many other technical
hands on courses.
Visit us at http://www.infosecinstitute.com/securityfocus to get
$720 off  any course!
--------------------------------------------------------------------
--------

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
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=eX8D
-----END PGP SIGNATURE-----



---------------------------------------------------------------------------
Ethical Hacking at InfoSec Institute. Mention this ad and get $720 off any 
course! All of our class sizes are guaranteed to be 10 students or less. 
We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion Prevention, 
and many other technical hands on courses. 
Visit us at http://www.infosecinstitute.com/securityfocus to get $720 off 
any course!  
----------------------------------------------------------------------------


Current thread: