[Quote:]
Of course it is a case of picking the right time to close the investigation and to correct the overall problem the quick way, but I am sure that everyone on this list used to use an OS reinstall as the answer to their problems more often than they do now.
[/Quote:]
Actually, I think you'll find that a significant portion of the people on this list use an OS reinstall *more* often than they did in the past, not less. If a forensic analysis is needed, that's one thing, but most of the people on this list would sooner reinstall than try to repair a compromised system. That's Security 101- if your system is compromised, it cannot be trusted and you cannot be absolutely certain that you've completely remediated whatever was done to it; therefore, a reinstall is pretty much a given.
Laura
