I agree it is the only 100% sure way to clean a system but 99% of the time you know when you have cleaned a system sati factually with various pieces of software and a good hour connected to the net doing a little surfing on the nasty dirty internet !!!!! Kevin Phillips KPIT Consulting kevin at kpitconsulting.com Office (413) 420-0212 Cell (413) 330-7789 www.kpitconsulting.com www.wmassforums.com -----Original Message----- From: Chris Hoogendyk [mailto:hoogendyk at bio.umass.edu] Sent: Monday, December 07, 2009 5:32 PM To: hidden-discuss at lists.hidden-tech.net Subject: Re: [Hidden-tech] PC technician recommendations? ** Be sure to fill out the survey/skills inventory in the member's area. ** If you did, we all thank you. Kevin Phillips wrote: > I will spend about 1/2 hour on a system cleaning it up and trying to > remove everything before giving up and recommending a clean install. > Yes it really is a pain to reload everything again but in the long > term you get a better experience. > Badly infected Windows never seem's to recover properly. Just as a general security note -- it is standard recommendation among sysadmins that, if you have an infected or hacked system, you wipe it and re-install. You just can't ever be sure that you have removed all backdoors or extraneous pieces of hacking kits. You might think you cleaned it up, and it ends up becoming fully reinfected very quickly because of some piece or backdoor that you didn't catch. If you have systematic backups, you might go back through them to determine when the infection occurred. And, If you can definitively tell when the infection first occurred, you might recover from those backups. But you really should wipe and either re-install or recover from known clean backups. -- --------------- Chris Hoogendyk - O__ ---- Systems Administrator c/ /'_ --- Biology & Geology Departments (*) \(*) -- 140 Morrill Science Center ~~~~~~~~~~ - University of Massachusetts, Amherst <hoogendyk at bio.umass.edu> --------------- Erdös 4 _______________________________________________ Hidden-discuss mailing list - home page: http://www.hidden-tech.net Hidden-discuss at lists.hidden-tech.net You are receiving this because you are on the Hidden-Tech Discussion list. If you would like to change your list preferences, Go to the Members page on the Hidden Tech Web site. http://www.hidden-tech.net/members