Aus aktuellem Anlass mal wieder der Hinweis auf die einzige Möglichkeit, ein kompromittiertes Windows System wieder
sauber zu bekommen: die Neuinstallation. Und das sagen (nur) irgendwelche Windows-Hasser aus gefürchteten Newsgroups,
sondern ein
Artikel im Microsoft Technet. In Kurzversion:
- You can’t clean a compromised system by patching it. Patching only removes the vulnerability.
- You can’t clean a compromised system by removing the back doors.
- You can’t clean a compromised system by using some "vulnerability remover."
- You can’t clean a compromised system by using a virus scanner.
- You can’t clean a compromised system by reinstalling the operating system over the existing installation.
- You can’t trust any data copied from a compromised system.
- You can’t trust the event logs on a compromised system.
- You may not be able to trust your latest backup.
- The only way to clean a compromised system is to flatten and rebuild.
Hört sich ja witzig an. Vor
allem wie er Kaiserslautern b
etont - Kaiserslautääärrn
Trackbacks
Trackback-URL für diesen Eintrag
Dirks Logbuch
05/16/2006 07:24
You can’t clean a compromised system by patching it. Patching only removes the vulnerability. You can’t clean a compromised system by removing the back doors. You can’t clean a compromised system by using some "vulnerability remover." You can’t clean a
Kommentare
Felix
Homepage
05/15/2006 01:28
Ralf Ramge
Homepage
05/15/2006 07:10
el*Loco
Homepage
05/15/2006 08:37
Kommentar schreiben