Slashdot Mirror
Spyware/Adware Prevention In Large Deployments?
foQ writes "I work in the IS department for a ~2000 networked computer environment across 10 locations. As with most people, we have experienced serious problems with spyware/adware. We have SpyBot and Ad-Aware installed on most computers, but this doesn't prevent the computers from getting these programs and only sometimes properly removes all of them. Is there a tool that we could push out to all the PCs to basically do what anti-virus programs do and block these programs from running and clean them from the computer?"
look I have mod points but I prefer to answer you... First if you have Automatic Update on chances that a hole in IE is exploited are extremely low. Indeed where I work it NEVER happened on patched machines (on non patched it HAPPENED). Second, again even if there was an hole if you are limited user a typical spyware program that exploits the hole won't be able to install its ActiveX thing so the parent was right since the topic is about spywares. This was experimentally confiremd here where I work: we have 50 desktops, all the users are not working as administrator but one (the usual stubborn dumbass). Well only the dumbass has been infested in more than two years. Based on these observation my feeling is that spyware developers target the usual home users working as administrator on an unpatched machine, as soon as you make the user limited the spyware stops working. If you had some real life windows admin practice you would have come to the same conclusion...but this is slahdot we know. Ah by the way don't you think you were just a tad too arrogant?
>>A document saved to the wrong folder ends up erased on reboot - that's no good for end users.
:p
To that I say "well, sorry 'bout that. Guess you'll save it to the correct place next time, huh?" Now go read some BOFH before you turn into a complete pussy.