We used to have this problem regularly and have minimized it to a very small number of incidents per year (out of dozens of Windows boxes) by making the following changes.
First, we use Untangle (free) as a transparent filter between our network and the Internet and have the following free Untangle modules installed: Spam Blocker, Phish Blocker, Spyware Blocker, Web Filter (we block p0rn), Virus Blocker, Protocol Control (we block P2P), and Ad Blocker. I think Untangle is responsible for 90% of our success. Second, we install Microsoft Security Essentials on every Windows PC. It is free, works well, updates itself, runs weekly scans and auto-cleans, doesn't slow down the system, and doesn't pop up warnings that freak out the users. Third (on some systems) we install Firefox and the Adblock Plus plugin and encourage people to use Firefox as their default browser. Some people still use IE and some people (like me) have moved on to using Google Chrome. You could try Sandboxie. I don't have first-hand experience with it, but I've heard a lot of good things about it. You can use it to "sandbox" certain applications so they can't make any permanent changes to the actual system. Basically, every time you close the browser, you flush the sandbox and any spyware (or even cookies) that tried to install themselves to the system get flushed. Chris On Fri, Jan 28, 2011 at 10:47 AM, Howard White <how...@usit.net> wrote: > Have a customer that keeps getting malware and rootkits on their Windows > computers. What? You've heard that before? Oh, sorry. > > Here's a hint. Don't install WhiteSmoke Translator. > > I know that a couple of folks on this list have worked with NX / FreeNX. > Is there a remote client to connect to a linux "server" from a Windows > client so that a user may surf the web on linux from a Windows desktop. > > Don't even think VNC. Waaaaaay too slow. > > Howard White > > -- > You received this message because you are subscribed to the Google Groups > "NLUG" group. > To post to this group, send email to nlug-talk@googlegroups.com > To unsubscribe from this group, send email to > nlug-talk+unsubscr...@googlegroups.com<nlug-talk%2bunsubscr...@googlegroups.com> > For more options, visit this group at > http://groups.google.com/group/nlug-talk?hl=en > -- You received this message because you are subscribed to the Google Groups "NLUG" group. To post to this group, send email to nlug-talk@googlegroups.com To unsubscribe from this group, send email to nlug-talk+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nlug-talk?hl=en
