How To Proctect your compromised system from further attacks by zedo and hackers.

Remove zedo here.

Cleaning a Compromised System and removing zedo .

So, you didn’t patch the system and it got hacked. What to do? Well, let’s see:

· You wont clean a compromised system by patching it. This only removes the vulnerability. Upon getting into your system, the hacker made sure he had other backdoors to get into your system.

· Removing backdoors wont clean your compromised system and also aren’t guaranteed that you cleaned allthe backdoors that the hacker left. . This also means that you are not the expert which Entails that you got hacked, so the guy hacking your computer probably knows more that you do about computers.

· Vulnerability removers don’t automatically clean your computer, they only remove one vulnerability, the hacker may have left 5 others behind. But say if your system was vulnerable to Blaster, it was also vulnerable to a number of other attacks which also means you cant guarantee against other attacks that may have been sent towards your computer.

· Virus scanners can be duped by hackers to tell them that a particular file is or isn’t present. So don’t rely on virus scanners unless you are sure that the particular virus has no backdoors associated with the virus. A simple example is when you have majority of email worms which rely on users clicking on an attachment where infection is only possible from the machine sending or machine opening the attachment. In the case of worm being available without user action then you cant guarantee that the worm is the only one with that vulnerability. Patching a computer wont necessarily proctect your system.

· Don’t trust data from a compromised system or computer. A hacker can install new data, so basically you would be making copies of copies of compromised data. Same as event logs cause the hacker can simply give you what he wants you to read.

· Don’t trust your latest backup, because simply hackers can just leave viruses in the backups, so you would be basically be leaving your backup with viruses.

• Simply this if you computer is affected by nasty virus, just flat out rebuild your system. That’s the only way to get a fully working computer.

Kategorie: Uncategorized, Aktualisiert am September 17, 2008 von seonmwando | Log in