Re: HOWTO: How to remove VX2 spyware (the latest and worst versions)

From: "dude" <deepdark@xxxxxxxxx>

| This administrator requested that no one installs SP2 NOR ANY OTHER
| UPDATES.
|
| Just going to a web site or even seeing AN ADVERT that exploits some
| old security hole will literally ravage your computer.
|
| What is the purpose of having an Internet connection if you can't use a
| browser?
|
| If you're telling me that it's OK to tell people not to install
| patches, I'm sorry, but you are giving people TERRIBLE advice.
|
| Because of people like you, my friend got infected with VX2 and that
| SpyAxe malware and I wasted 5 hours of my life because of that dickhead
| administrator, so that my friend can do his job normally.
|
| So don't give people crazy advice or I'll think you work for SpyAxe.
|

Actually SP2 could have little to do with it. Yes there are vulnerabilities that are
mitigated and there is the FireWal, etc...

However, in this case even if SP2 was installed the user has "too many" rights and was able
to install it.
The PC should have been security hardened and sufficient Group policies being pushed down to
the workstations to limit the users use. The lack of this just made is easy for an
employee, who doesn't practice Safe Hex, to install anything they can. This can happen with
SP2 as well.

Your friend's actions caused the installation and the administrator allowed them implicitly.

The company should have Security Awareness Training (SAT) that includes practicing Safe Hex.
The company should institute an Authorized Use Policy and all employees have to sign it.
The administrator has to take security serious or the company's proprietary data is a great
risk.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


.