![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png)
DUH!
http://www.eweek.com/article2/0,1895,1945808,00.asp
"When you are dealing with rootkits and some advanced spyware programs, the only solution is to rebuild from scratch. In some cases, there really is no way to recover without nuking the systems from orbit," Mike Danseglio, program manager in the Security Solutions group at Microsoft, said in a presentation at the InfoSec World conference here."
We use a program at the university called Deep Freeze. It locks the computer so that every time the computer is rebooted, it is effectively instantly wiped out and reloaded. Virus hits you? Reboot. Malware making popups? Reboot. All gone, all clean.
The down side is that you can't do system updates without unfreezing your machine, I spent probably five hours over spring break updating computer labs: unfreeze machine, apply updates, refreeze. We also use a rather nifty feature in the computer lab: all of the machines turn themselves off at 10:30pm.
Their more advanced versions offer a lot more features. Basically, when you run this, your C: is read-only. Anything written to it goes away. So you have to be absolutely sure that your data is written to another drive or to a network area.
http://www.eweek.com/article2/0,1895,1945808,00.asp
"When you are dealing with rootkits and some advanced spyware programs, the only solution is to rebuild from scratch. In some cases, there really is no way to recover without nuking the systems from orbit," Mike Danseglio, program manager in the Security Solutions group at Microsoft, said in a presentation at the InfoSec World conference here."
We use a program at the university called Deep Freeze. It locks the computer so that every time the computer is rebooted, it is effectively instantly wiped out and reloaded. Virus hits you? Reboot. Malware making popups? Reboot. All gone, all clean.
The down side is that you can't do system updates without unfreezing your machine, I spent probably five hours over spring break updating computer labs: unfreeze machine, apply updates, refreeze. We also use a rather nifty feature in the computer lab: all of the machines turn themselves off at 10:30pm.
Their more advanced versions offer a lot more features. Basically, when you run this, your C: is read-only. Anything written to it goes away. So you have to be absolutely sure that your data is written to another drive or to a network area.