Which to me presents a bigger problem than the original issue altogether. -----Original Message----- From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED] Sent: Thursday, February 14, 2008 1:53 PM To: NT System Admin Issues Subject: Re: Regarding Trojan Infections!
+1 On Thu, Feb 14, 2008 at 11:01 AM, Carl Houseman <[EMAIL PROTECTED]> wrote: > > > Not to mention, you can never be 100% sure you found and removed everything. > > Carl > > ________________________________ > From: Joe Heaton [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 14, 2008 10:41 AM > > To: NT System Admin Issues > Subject: RE: Regarding Trojan Infections! > > > > I agree with this for the most part. Takes a lot less time to re-image a > machine than to dig through registry entries, and folders looking for > remnants of a virus/malware, etc. > > Joe Heaton > > > ________________________________ > From: Fogarty, Richard R Mr CTR USA USASOC > [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 14, 2008 7:39 AM > To: NT System Admin Issues > Subject: RE: Regarding Trojan Infections! > > > > > > I'm not sure why it's happening, but in my experience, when we have a > machine that is infected, we move it off the network. Once off, we gather > all info that is needed (which most is on the network anyway) then re-image > it. I've never had good experiences letting the AV software do it's > cleaning. If it doesn't catch it at first (and at best quarantine it) then, > I'm re-imaging the system. Just my $0.02 > > > > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 14, 2008 4:41 AM > To: NT System Admin Issues > Subject: Regarding Trojan Infections! > > > > > Hi everyone! > > Thought of posting this here in the hope of getting some feedback regarding > a problem we encountered with Trojan infections. Lately we had a number of > workstations, about three, infected with a number of Trojans. Examples of > these were Troj/Agent-GPK, Mal/Behav-112 and Spy-Agent.bv. > Even though we were on the latest DAT and Scan Engine, McAfee VSE 8.5i > (Patch 3) was unable to remove them completely. It used to say that they > were deleted but they kept cropping up again. I even tried using another > Anti-Virus product, but still no success. It seems that the only solution is > to format the hard disk and install Windows XP Pro from scratch. Hardly an > ideal solution! All this has led us to conclude that the McAfee AV does not > offer adequate protection against Trojans and furthermore when these are > detected they are not 100% removed from the workstation. > What are your thoughts on this? Has anyone been through such experiences? > Would appreciate any feedback on this. > > Thanks > Pierre > > > > > > > > > > > > > > > > > > > -- ME2 ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~ ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
