Re: what is your advice to your users

[Ken Connelly <Ken.Connelly () UNI EDU>]

A removal tool for WMF might be to install linux on the machine...

Seriously, the WMF vulnerability will allow any number of exploits to be
installed on the infected computer, so there is no single removal tool
that could be used.  As is the case with any bot-like infection (where
the bad guy has complete control of the infected computer),
reformat/reinstall is the only real cure.

- ken

Jim Schug wrote:

> > Does anyone know of a removal tool for the WMF exploit?
>
>
>
> Ability is what you're capable of doing.
>     Motivation determines what you do.
>         Attitude determines how well you do it.
> /-Lee Holz/
>
> Jim Schug
> Information Security Instructor
> http://oncampus.matc.edu/infosec
> Milwaukee Area Technical College
> 5555 West Highland Road, Mequon, WI 53092  USA
> Phone: (262) 238-2267

--
- Ken
=================================================================
Ken Connelly             Associate Director, Security and Systems
ITS Network Services                  University of Northern Iowa
email: Ken.Connelly () uni edu   p: (319) 273-5850 f: (319) 273-7373
It's much more important to know what you don't know than what you do know!