E-Mail Request: USB Based AntiSpyware
Ken’s bosses are looking for a way to check systems for spyware, etc. without installing something on each machine. Ken writes:
Hey man. I was wondering if you had or know of a solution I can use a USB drive to go around to computers and run a spyware scan of computers? I have some big honchos here that think they are infected and they want me to run around to a bunch of computers and test them all WITHOUT installing anything on them.
thx
Ken
Well, Ken, there are a couple of solutions that I can possibly recommend. I would also like to possibly recommend a couple of things you can do to make your life easier around this issue.
First, the software. There are a number of different software packages that could help you out in this area. Here is the list that I have compiled from various sources:
- RogueRemover (USB install instructions)
- Sophos Anti-Rootkit
- RootkitRevealer
- ClamWin AV Portable
- Spybot-S&D (USB install instructions)
- HijackThis
- Doctor Alex
So, now that you have a list of applications that you can install on a USB drive, your next task is going to be running around to each of the computers and checking to make sure that they are clean. If not, clean them.
Here’s the problem. Checking for spyware and viruses is not a one time thing. Just the same way that you need to change the oil in your car on a regular basis, you need to check for these nasties regularly as well. So, unless you are training for the local running marathon, you may want to automate this whole thing.
Probably one of the easiest options would be to use your network to your advantage (I am assuming that all of the systems are on the same network and have access to a network share). Follow these steps:
- Create a network share
- Put your application of choice in the share
- Modify your startup/log on/log off/shutdown script (you select the one you want) to run the application automatically
The one catch to doing it this way is that you need to select a tool that will accept command line switches to start the scan immediately, not just run the GUI. I know that Spybot can do this and I’m sure some of the other solutions can as well.
So, this way, you have kept your boss’s criteria of installing nothing on the workstations and you have made your life bearable by automating the process!
If you found this post useful, why don't you buy me a cup of coffee to show your gratitude?
2 Responses to “E-Mail Request: USB Based AntiSpyware”
-
The Fieldhouse Says:
November 30th, 1999 at 12:00 amSmall Business Primer on Network Security Threats20 Ways To Mark Safer Internet Day 2007Protect Your Privacy With A LiveCDPersonal Servers: Are We At That Point?New Security Blog With PromiseDIY IT Security AuditE-Mail Request: USB Based AntiSpywareThanks, Google! Sincerely, SpammersAnatomy of a Network HijackingWilliam Shatner: IT Security Specialist!?Don’t Be a Soldier in the Botnet ArmyUsing Whitehats to Stop BlackhatsUsing Translators to Fight Censorship
-
Kiltak Says:
January 19th, 2007 at 8:59 amAnother tip concerning spywares, don’t forget to run at least 2 of them consecutively when scanning your machines. I run both Adaware and Spybot on people’s boxes, and they both find things that the other hasn’t discovered.
-
dbsteele Says:
January 19th, 2007 at 9:30 amAnother very useful program I use on all my computers is ‘Winpatrol’. It’s great for finding out what’s running on your machine and monitoring installs. I don’t know if it’s runnable from a USB drive, though.
