Re: Compromised WinXP box prob

[Quote:]
> Of course it is a case of picking the right time to close the 
> investigation and to correct the overall problem the quick way, but I am 
> sure that everyone on this list used to use an OS reinstall as the answer 
> to their problems more often than they do now.
[/Quote:]

Actually, I think you'll find that a significant portion of the people on 
this list use an OS reinstall *more* often than they did in the past, not 
less. If a forensic analysis is needed, that's one thing, but most of the 
people on this list would sooner reinstall than try to repair a compromised 
system. That's Security 101- if your system is compromised, it cannot be 
trusted and you cannot be absolutely certain that you've completely 
remediated whatever was done to it; therefore, a reinstall is pretty much a 
given.

Laura