[TriLUG] Corporate solutions for spyware?

[jonc]

Spyware is a *big* problem these days. Some come via email but from what
I've seen in industry most spyware is put on Windows boxen by
unsuspecting folks who actually download it themselves and install
it.... "Hay look what Tiny Elvis does when I get an email!"

Folks who what stuff for free need to use Linux (or BSD).

Most virus scanners will also look for spyware - especially the really
bad stuff. Unfortunately, spyware is one of the least reported abuse
items, so many instances go unnoticed. Plus the user *actually*
installed it. Most times it does something legit that the poor batsord
wants.

I've found Zone Alarm to be most helpful in tracing it down and killing
it - even after the user has told Zone Alarm to let the spyware have its
way with their internet connection.

These days though you really need a app (if your Virus scanner doesn't
do it) that will look for and remove spyware. 

This site has also been helpful in manually extracting some relatives
who have "Tiny Elvis-ed" themselves into some real trouble:
  http://www.spywaredb.com/

Good Luck - Jon Carnes

On Mon, 2006-01-09 at 12:14, Chad Thomsen wrote:
> This may be off topic because spyware is usually a windows issue.  That
> being said what are folks doing about spyware in a corporate environment.
> Is spyware that big of a deal to worry about in a corporate environment (200
> user network).  We have all windows clients, windows, linux and AS400
> servers.  I have already implemented spam and anivirus solutions but am
> wondering if the spyware is a real issue for a small to medium size business
> and what  products to look at.
> 
> I am looking at a Barracuda applicance currently if I get a solution.  I
> can't go with Linux based (home built) because I don't have enough time to
> baby sit it and its nice to have managment point the finger at Barracuda if
> something goes wrong with THEIR applicance and not my home built solution.
> 
> Any advice and/or opinions appreciated.