+ Post New Thread
Results 1 to 11 of 11
Internet Related/Filtering/Firewall Thread, users getting infected with spyware in Technical; hey ppl, we did a scan on a few systems using Spyware Dr. on a few of our users and ...
  1. #1
    techie211's Avatar
    Join Date
    Feb 2009
    Posts
    130
    Thank Post
    27
    Thanked 1 Time in 1 Post
    Rep Power
    0

    users getting infected with spyware

    hey ppl, we did a scan on a few systems using Spyware Dr. on a few of our users and they are getting infected with 'Application.TrackingCookies' and 'Adware.Advertising'. These users were getting 'Undeliverable' emails and were send hundreds of emails to different accounts causing our mail server/domain to be blacklisted with Yahoo.com, Verizon.net & Aol.com. We've since then disabled those accounts and reinstated our whitelist status. Just wanted to know what everyone out there uses to prevent these infections...software/hardware/scripts?

    thanks

    -j

  2. #2

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    10,694
    Thank Post
    1,781
    Thanked 2,166 Times in 1,601 Posts
    Rep Power
    769
    Mandatory profiles are a good start - cookies, etc are not saved back to the profile.

  3. #3
    t_h
    t_h is offline
    t_h's Avatar
    Join Date
    Aug 2009
    Location
    Manchester
    Posts
    131
    Thank Post
    7
    Thanked 20 Times in 18 Posts
    Rep Power
    14
    Were the accounts in question Administrator accounts? If so, giving users standard accounts would be a great start.

  4. #4
    mossj's Avatar
    Join Date
    Dec 2008
    Location
    Leicester
    Posts
    1,466
    Thank Post
    157
    Thanked 189 Times in 174 Posts
    Rep Power
    52
    A decent AV would help, preferably centrally managed we use sophos but i've heard good things about nod32

  5. #5
    dwhyte85's Avatar
    Join Date
    Mar 2009
    Location
    Berkshire
    Posts
    1,213
    Thank Post
    156
    Thanked 146 Times in 131 Posts
    Rep Power
    102
    Prevention we have Sophos AV & Sophos Web Filtering, users are not administrators or power users and therefore can't install things. OpenDNS maybe something to consider as they blacklist alot of dodgy sites.

    Removal... MalwareBytes & Nod32 is the way forward. Nod32 seems to get alot of the newly crypted stubs and executables before everyone else, must have good links with the underground :P

  6. #6


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,746
    Thank Post
    221
    Thanked 2,626 Times in 1,936 Posts
    Rep Power
    778
    It seems malware/virus authors are targeting applications like Adobe Flash Player, Adobe Reader, Apple QuickTime and Sun's Java Runtime Environment more and more these days probably due to the numerous security vulnerabilities they have, so it's definitely worth updating these apps regularly to prevent computers getting exploited.

  7. #7
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,650
    Thank Post
    164
    Thanked 217 Times in 200 Posts
    Rep Power
    66
    Quote Originally Posted by Arthur View Post
    It seems malware/virus authors are targeting applications like Adobe Flash Player, Adobe Reader, Apple QuickTime and Sun's Java Runtime Environment more and more these days probably due to the numerous security vulnerabilities they have, so it's definitely worth updating these apps regularly to prevent computers getting exploited.
    Adobe software has so many flaws and vulnerabilities these days it's ridiculous... I mean it's one thing for a huge OS supporting thousands of apps to need regular patching but to mess it up on a program like a PDF reader is shocking imo

  8. #8
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Hi

    Have a look at spyware blaster and spybot search and destroy. We also filter the internet and ban games sites. This has helped a lot.

    Richard

  9. #9

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    3,081
    Thank Post
    382
    Thanked 428 Times in 317 Posts
    Rep Power
    383
    I dont rate spybot anymore. Found too many things it missed and too many things it could not remove. Try malwarebytes instead Malwarebytes.org

  10. #10
    mossj's Avatar
    Join Date
    Dec 2008
    Location
    Leicester
    Posts
    1,466
    Thank Post
    157
    Thanked 189 Times in 174 Posts
    Rep Power
    52
    Although both malware & spybot are good they aren't centrally managed therefore you would have constent problems in medium/large networks.

    With our Sophos we can deploy updates/set allow rules/deploy the AV or firewall or both/and set what it does on discovery/start scans all centraly from one server. Our users don't start screaming for us when something pops up on there screen... because it doesn't.

    Will make your life so much easier!

  11. #11

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    10,694
    Thank Post
    1,781
    Thanked 2,166 Times in 1,601 Posts
    Rep Power
    769
    Spybot S&D is only free for personal use. You can pay for a corporate/small business version which runs on a server. Spybot S&D for non private use

SHARE:
+ Post New Thread

Similar Threads

  1. [Joke] Windows 7 to be supplied ‘pre-infected’
    By kearton in forum Jokes/Interweb Things
    Replies: 7
    Last Post: 4th August 2009, 08:19 PM
  2. Malware/Spyware...
    By azrael78 in forum Windows
    Replies: 2
    Last Post: 18th June 2009, 10:17 PM
  3. spyware
    By peterpan in forum Wireless Networks
    Replies: 1
    Last Post: 5th February 2009, 09:38 PM
  4. Malware/Adware or Spyware Computer Infected
    By MyDejaVu in forum Windows
    Replies: 10
    Last Post: 30th May 2008, 07:44 PM
  5. Spyware
    By speckytecky in forum General Chat
    Replies: 5
    Last Post: 6th December 2006, 08:15 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •