Microsoft Says Recovery from Malware Becoming Impossible

Tyson Sawyer tyson at j3.org
Wed Apr 19 16:04:01 EDT 2006


Ben Scott wrote:
> The problem is that if you've had a full system compromise
> (whether you call your superuser "root", Administrator, or
> SUPERVISOR), you can no longer trust the computer to check itself. 
> The attacker can subvert the system to lie to you about itself.

How about boot disks that have been premade to check your system and 
identify suspect files?  This way the compromised filesystem isn't 
checking itself although the computer is checking itself.

...could avoid a full, from scratch, reinstall.

Cheers!
Ty

-- 
Tyson D Sawyer

"What is ominous is the ease with which some people go from saying that
they don't like something to saying that the government should forbid
it. When you go down that road, don't expect freedom to survive very
long." -- Thomas Sowell



More information about the gnhlug-discuss mailing list