Re: Assume miles for wireless router range.
[email protected] (John E. Malmberg) 10 Mar 2006 13:35:06 -0600
| Newsgroups | gmane.mail.spam.spamcop.help |
|---|---|
| Organization | Encompasserve |
| Message-ID | <[email protected]> |
In article <[email protected]>, [email protected] (John E. Malmberg) writes: > There is a posting on the webforum about "Spamcop after virus / spyware > attack" where it appears that the cause was an insecure wireless router. As another data point, if a hacker has access to an insecure wireless router, it may be possible that those hackers got full access to the hardrives of the connected systems. With that type of access, they can install malware that does not need to propagate by viruses, and as such is not detectable by any scanner that looks for patterns. They can also replace the scanner programs with spoofs, which from what I understand is one of the tricks that malware has been doing for years. So at this point, since spam is still being sent, it must be assumed that the computers have been taken over by unknown programs. The only reliable fix in this case is reload all files from known good media, which on modern PCs can require a trip to an authorized repair center, because if you did not make the full recovery CDs or DVDs before the infection, you no longer have any reliable way to restore the PC to a clean state. Only an authorized repair center has that information. There is no safe way for a non-technical user to recover any information off of infected hard drives. That needs to be done by someone with the technical expertise to sort out the files that can not contain an infection, and can be very time consuming and expensive. There are tools that can replicate documents that may have malware hidden in them with out replicating the malware. It also has to be assumed that who ever put the malware on the computer has access to any information that has ever been displayed or entered in that computer. This means that critical passwords, bank account numbers, PINs, TAX information may have been stolen, and the attacker may have access to the bank and credit/debit cards of the system owner or the easy ability to do identity theft. -John [email protected] Personal Opinion Only