RE: computer with rootkit?

[Dan Lynch <DLynch () placer ca gov>]

> Repairing a rootkit infection is not that difficult. I've 
> been reverse engineering them for years. Those who have 
> suggested a reinstall should be ashamed.

Really? It would take at least a few hours to clean as you described, more for someone unfamiliar with the tools and 
procedures. While the process may be educational, the result is not entirely reliable. Re-imaging a machine to a 
standard install can be done in 15 minutes. Unless the system is highly customized, or a standard image isn't 
available, cleaning off an advanced rootkit is nearly always a waste of time.



Dan Lynch, CISSP
Information Technology Analyst
County of Placer
Auburn, CA

> -----Original Message-----
> From: listbounce () securityfocus com 
> [mailto:listbounce () securityfocus com] On Behalf Of Jamie Ivanov
> Sent: Thursday, September 29, 2011 9:36 AM
> To: Brian Rogalski; listbounce () securityfocus com; security basics
> Subject: Re: computer with rootkit?
------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------