This presentation covers the issues Tech
Support personnel need to know in order to deal
with today's malware threats. Viruses and
spyware are more prevalent today than ever
before, and these malicious programs have become
far more sophisticated than they were in the
past.
In many cases there are no obvious symptoms
of infection, so the malware may remain on the
infected computer for weeks or months
undetected. Once it has been determined that a
machine has been compromised, the malware may
have disabled most of the tools and the
traditional methods of removing the infestation.
This behavior may take the form of disabling
Task Manager or Regedit, blocking access to the
Internet or just certain web sites, removing the
Run command or the ability to run a Command
Prompt. Most anti-virus software will be removed
or disabled, and frequently cannot be
reinstalled. It may be impossible to run Windows
Updates or to download other updated programs.
While anti-virus and other security software
is an important factor in protecting computer
systems against today's threats, a total
solution requires many additional components and
an increased awareness of the vulnerabilities
present on every computer. This presentation
will highlight some of the most critical
exposures and suggest corrective measures.
These are some of the topics that will be
covered:
Definitions -- Virus, Worm, Trojan
Horse, Spyware, and why you need to understand
the differences
