Finally!

[plonq]

I set up Symantec's online virus scan and let it run overnight.  In spite of all the other scans I have run on this machine, it found 4 more Trojans on the computer.  I think it was just finding some straggler elements of what I had removed earlier.  I manually deleted the four files and then put the machine through a short battery of tests to make sure that everything still worked.

The machine is now going through a final defrag before I return it to its owner with a clean bill of health.  I instructed him to break his kids' fingers if he catches them trying to install KaZaA on the machine again.

Comments

[feren.livejournal.com]

That reminds me -- I need to finish the RFC for the "Stab Somebody In the Face Over IP" protocol.

[furahi.livejournal.com]

Yay! Kids with broken fingers n_n

[plonq.livejournal.com]

If you could add a "pour acid in the wounds" extension then I'd definitely buy in.

[plonq.livejournal.com]

This machine was palpable evidence that there should be a minimum IQ requirement before somebody can hook their Windows machine up to the net. This machine had so many bugs on it I was getting hives just being in the same room with it.

Aside from hardening it a bit against future exploits, I gave the owner a fairly pointed lecture about keeping a more secure system.

[feren.livejournal.com]

Could it be salty acid?

[wabbitcalif.livejournal.com]

Y'know, I'm not in IT or PC repair, but I do respect the hell out of Pro's like you that are able to go in and troubleshoot a pc (and its user - oy!). I'm savvy enough to take care of my own PC, and call the pro's out when I can't get it done myself.

I'd agree with you there - too many stupid people using computers these days. If this guy has no concept at all of what the rest of the family is doing with his computer, he should'nt be allowing them ON his computer!

[plonq.livejournal.com]

Heh - that's the first time I've been accused of being a Pro. I'm not even in IT. I've just built, configured and fixed enough machines over time to have picked up a few tricks. I'm one of those users that the real Pros hate because I know just enough to be dangerous.

[wabbitcalif.livejournal.com]

*chuckles* Hey, that's still more than I've done with a tower!

[boinggoat.livejournal.com]

Out of curiosity, did you single out Kazaa for it's spyware-oriented buisness model, or were you warning him off of file-sharing software in general (as a gateway for all sorts of infected stuff)?

[plonq.livejournal.com]

I singled out KaZaA in this instance. If his kids really feel the need to share files then I will direct them to some less spyware-laden alternatives. I've installed enough trip wires and alarm bells in this system now that if they try to install some more viruses, worms and trojans it will kick up enough fuss that at least they can't come back and say they didn't know...