RE: Imaging Operating Systems

["Lionel Hendricks" <lionelhendricks () cox net>]

Build the system out from a blank drive. Make sure its totally 100%
disconnected from any internet source. Install your Service Packs and
hotfixes from a "trusted" CD. Trusted meaning - one that you know isn't
infected with anything. Afterward - pick up on the advice of the other peeps
and either Ghost or just image the drive.

||-----Original Message-----
||From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-
||admin () lists netsys com] On Behalf Of James Riden
||Sent: Wednesday, May 26, 2004 5:24 PM
||To: mbs () mistrealm com
||Cc: Full-Disclosure
||Subject: Re: [Full-disclosure] Imaging Operating Systems
||
||Michael Schaefer <mbs () mistrealm com> writes:
||
||> Hi all
||>
||> We are building a Windows test system, to try out tool bars, spy ware,
||> malware and trojans on.
||>
||> Once we learn what we need to know, we obviously want to get rid of
||> the junk quickly and cleanly.
||>
||> I keep hearing suggestions about having a "clean image" to transfer
||> onto the computer.
||>
||> Can anyone send some details?
||
||Ghost or Altiris can do this for you.
||
||--
||James Riden / j.riden () massey ac nz / Systems Security Engineer
||Information Technology Services, Massey University, NZ.
||GPG public key available at: http://www.massey.ac.nz/~jriden/
||
||_______________________________________________
||Full-Disclosure - We believe in it.
||Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html