On 02/17/2009 12:47 AM, ~BD~ sent:
> "Dustin Cook" <> wrote in message
> news:Xns9BB498BACBEC3HHI2948AJD832@69.16.185.250.. .
>>> How would a Windows user know that installing MBAM really is a good
>>> thing to do? Whilst the programme may well remove all manner of
>>> 'nasties' from the machine of a user, how can that user be certain
>>> that it hasn't actually *installed* some badware too?
>
>> Just one question.... Are you high?
>
>> --
>> Regards,
>> Dustin Cook
>> Malware Researcher
>> MalwareBytes - http://www.malwarebytes.org
>>
>
>
> No, Sir!
>
> Still naive? Probably!
Paranoid?
> Correct me where I am wrong, please.
>
> My understanding is that 'malware' can be, and is, installed surreptitiously
> upon millions of computers around the world. Often, a user is unaware that a
> machine has been compromised.
Almost a bit like Conficker, huh? Reads like good, safe computing and
realtime antimalware applications are needed Dave.
> There are many 'help' forums available on the Internet. It seems only
> logical that some such operations may take advantage of inexperienced folk
> who do, without a second thought, download all manner of executable
> programmes onto their machines (as instructed by a 'helper').
Reputation leads to trust. If David Lipman suggested an MBAM scan for a
particular infection you described in /your/ computer, what would you do?
> Once a machine has been declared 'clean' - how can the average user possibly
> know that something 'nastie' has not been *added* to their machine if it
> appears to operate 'normally'?
Intrusion Detection Systems (IDS), realtime antimalware scans, or
flatten, rebuild, restore from backups.
> This couldn't/wouldn't happen? Are you sure?
You already know that answer.
> --
> Dave
Trust must start somewhere and some paranoia is useful.
MBAM has our trust through its reputation Dave. A bogus MBAM /could/ be
downloaded from a disreputable source of course. But by only
downloading from MalwareBytes.com, it comes as close to 100% trust as is
possible.
Some software authors will provide md5/sha1 hashes or PGP/GPG signed
files that accompany the download and this is welcomed by some, but some
reluctance on the part of authors and users is making that level of
verification difficult. How then do we implement: trust but verify?
If one is paralyzed by so much suspicion and doubt, then it's probably
best to leave your computer turned off or only surf the net and do email
through LiveCDs.
What will you do now Dave?
Pete
--
1PW @?6A62?FEH9

E=6o2@=]4@> [r4o7t]