Educause Security Discussion mailing list archives

Re: Marketscore and Higher Ed


From: Joel Rosenblatt <joel () COLUMBIA EDU>
Date: Thu, 23 Dec 2004 09:36:17 -0500

Here is the page we have for removal:

<http://www.columbia.edu/acis/security/howto/remove/marketscore.html>

You are welcome to point to it.

Joel Rosenblatt

Joel Rosenblatt, Senior Security Officer & Windows Specialist, AcIS
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel


--On Thursday, December 23, 2004 9:19 AM -0500 Jeff Kell <jeff-kell () UTC EDU> wrote:

OK, now we're tracking marketscore traffic with snort and have found the
apparent list of infected/infested systems.  I recall there were several
different workarounds suggested for removing the thing.  I am curious
what the current "state of the art" suggestions are for verifying it's
presence and removing the software (i.e., what advice do you give to the
user)?

Jeff

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.



Joel Rosenblatt, Senior Security Officer & Windows Specialist, AcIS
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.

Current thread: