+ Post New Thread
Results 1 to 11 of 11
Internet Related/Filtering/Firewall Thread, users getting infected with spyware in Technical; hey ppl, we did a scan on a few systems using Spyware Dr. on a few of our users and ...
  1. #1
    techie211's Avatar
    Join Date
    Feb 2009
    Posts
    146
    Thank Post
    36
    Thanked 1 Time in 1 Post
    Rep Power
    0

    users getting infected with spyware

    hey ppl, we did a scan on a few systems using Spyware Dr. on a few of our users and they are getting infected with 'Application.TrackingCookies' and 'Adware.Advertising'. These users were getting 'Undeliverable' emails and were send hundreds of emails to different accounts causing our mail server/domain to be blacklisted with Yahoo.com, Verizon.net & Aol.com. We've since then disabled those accounts and reinstated our whitelist status. Just wanted to know what everyone out there uses to prevent these infections...software/hardware/scripts?

    thanks

    -j

  2. #2

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    9,825
    Thank Post
    1,823
    Thanked 2,252 Times in 1,658 Posts
    Rep Power
    805
    Mandatory profiles are a good start - cookies, etc are not saved back to the profile.

  3. #3
    t_h
    t_h is offline
    t_h's Avatar
    Join Date
    Aug 2009
    Location
    Manchester
    Posts
    131
    Thank Post
    7
    Thanked 20 Times in 18 Posts
    Rep Power
    15
    Were the accounts in question Administrator accounts? If so, giving users standard accounts would be a great start.

  4. #4
    mossj's Avatar
    Join Date
    Dec 2008
    Location
    Leicester
    Posts
    1,466
    Thank Post
    157
    Thanked 189 Times in 174 Posts
    Rep Power
    52
    A decent AV would help, preferably centrally managed we use sophos but i've heard good things about nod32

  5. #5
    dwhyte85's Avatar
    Join Date
    Mar 2009
    Location
    Berkshire
    Posts
    1,219
    Thank Post
    159
    Thanked 147 Times in 132 Posts
    Rep Power
    103
    Prevention we have Sophos AV & Sophos Web Filtering, users are not administrators or power users and therefore can't install things. OpenDNS maybe something to consider as they blacklist alot of dodgy sites.

    Removal... MalwareBytes & Nod32 is the way forward. Nod32 seems to get alot of the newly crypted stubs and executables before everyone else, must have good links with the underground :P

  6. #6


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,126
    Thank Post
    232
    Thanked 2,734 Times in 2,015 Posts
    Rep Power
    799
    It seems malware/virus authors are targeting applications like Adobe Flash Player, Adobe Reader, Apple QuickTime and Sun's Java Runtime Environment more and more these days probably due to the numerous security vulnerabilities they have, so it's definitely worth updating these apps regularly to prevent computers getting exploited.

  7. #7
    gshaw's Avatar
    Join Date
    Sep 2007
    Location
    Essex
    Posts
    2,666
    Thank Post
    167
    Thanked 221 Times in 204 Posts
    Rep Power
    67
    Quote Originally Posted by Arthur View Post
    It seems malware/virus authors are targeting applications like Adobe Flash Player, Adobe Reader, Apple QuickTime and Sun's Java Runtime Environment more and more these days probably due to the numerous security vulnerabilities they have, so it's definitely worth updating these apps regularly to prevent computers getting exploited.
    Adobe software has so many flaws and vulnerabilities these days it's ridiculous... I mean it's one thing for a huge OS supporting thousands of apps to need regular patching but to mess it up on a program like a PDF reader is shocking imo

  8. #8
    ricki's Avatar
    Join Date
    Jul 2005
    Location
    uk
    Posts
    1,475
    Thank Post
    20
    Thanked 164 Times in 157 Posts
    Rep Power
    52
    Hi

    Have a look at spyware blaster and spybot search and destroy. We also filter the internet and ban games sites. This has helped a lot.

    Richard

  9. #9

    JJonas's Avatar
    Join Date
    Jan 2008
    Location
    North Walsham, Norfolk
    Posts
    3,131
    Thank Post
    394
    Thanked 441 Times in 327 Posts
    Rep Power
    385
    I dont rate spybot anymore. Found too many things it missed and too many things it could not remove. Try malwarebytes instead Malwarebytes.org

  10. #10
    mossj's Avatar
    Join Date
    Dec 2008
    Location
    Leicester
    Posts
    1,466
    Thank Post
    157
    Thanked 189 Times in 174 Posts
    Rep Power
    52
    Although both malware & spybot are good they aren't centrally managed therefore you would have constent problems in medium/large networks.

    With our Sophos we can deploy updates/set allow rules/deploy the AV or firewall or both/and set what it does on discovery/start scans all centraly from one server. Our users don't start screaming for us when something pops up on there screen... because it doesn't.

    Will make your life so much easier!

  11. #11

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    9,825
    Thank Post
    1,823
    Thanked 2,252 Times in 1,658 Posts
    Rep Power
    805
    Spybot S&D is only free for personal use. You can pay for a corporate/small business version which runs on a server. Spybot S&D for non private use

SHARE:
+ Post New Thread

Similar Threads

  1. [Joke] Windows 7 to be supplied ‘pre-infected’
    By kearton in forum Jokes/Interweb Things
    Replies: 7
    Last Post: 4th August 2009, 08:19 PM
  2. Malware/Spyware...
    By azrael78 in forum Windows
    Replies: 2
    Last Post: 18th June 2009, 10:17 PM
  3. spyware
    By peterpan in forum Wireless Networks
    Replies: 1
    Last Post: 5th February 2009, 09:38 PM
  4. Malware/Adware or Spyware Computer Infected
    By MyDejaVu in forum Windows
    Replies: 10
    Last Post: 30th May 2008, 07:44 PM
  5. Spyware
    By speckytecky in forum General Chat
    Replies: 5
    Last Post: 6th December 2006, 08:15 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •