Re: How to detect and remove Spyware?

["Bill Dean" <bill.dean999 () comcast net>]

If the machine is running, the only other way is to press ctrl+alt+shift+T at the same time to see if the admin console 
appears. This will only work if this setting has not been changed. 

I have had 4 cases in 3 months that involved this software and I have definitely developed a respect for it. 

Bill 
 



Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: "J. Lion" <jv4l1n4 () gmail com>

Date: Mon, 2 Jun 2008 08:07:23 
To:bill.dean999 () comcast net
Cc:security-basics () securityfocus com
Subject: Re: How to detect and remove Spyware?


Yes - I was referring to the commercial stealth computer surveillance
tools and spyware such as ActMon and SpectorSoft.

Besides firewall - is there anything else that can be use to detect
and remove these?


On Fri, May 30, 2008 at 6:12 PM, Bill Dean <bill.dean999 () comcast net> wrote:
> If you are referring to spectersoft, my experience in forensic investigations is that any version past 5.0 cannot be 
> fingerprinted or detected. Your only hope is a 2 way firewall to catch the communications going out.
>
> Bill Dean
> Forensic Discoveries
> Sent from my Verizon Wireless BlackBerry
>
> -----Original Message-----
> From: "J. Lion" <jv4l1n4 () gmail com>
>
> Date: Fri, 30 May 2008 15:39:48
> To:security-basics () securityfocus com
> Subject: How to detect and remove Spyware?
>
>
> How do you detect and remove spyware?
>
> Can you use Lavasoft Adaware or Spybot Search & Destroy to detect
> spyware software such as Symantec Spector spyware?
> Can you use AV software such as AVG or Norton to detect Spector?