[IP] Re: ma Re: c trojan in-the-wild

[David Farber <dave@farber.net>]

Begin forwarded message:

From: Joshua Tinnin <krinklyfig@gmail.com>
Date: November 1, 2007 11:17:47 AM EDT
To: David Farber <dave@farber.net>
Subject: Re: [IP] ma Re:   c trojan in-the-wild
Reply-To: krinklyfig@gmail.com

I clean infected machines on a daily basis. One of the first steps we
take before cleaning is to turn off System Restore, as infections will
typically get backed up in a restore point and are very difficult to
clean. Generally speaking, I would not recommend someone use System
Restore to clean an infection, unless it's a newly infected machine with
known clean restore points (and I wouldn't want to take that chance).

- jt

-------------------------------------------