Every day, adversaries attempt to invade your networks and infect your systems with viruses, spyware, and other malware. In other cases, employees can open the door to malware by visiting infected Web sites, opening the wrong e-mail attachments, or running macros that contain viruses.
As an IT professional focused on security, you know the risks first hand. You've installed antivirus software and you keep your protection updated. Sometimes, though, attacks are successful, and computers get infected. And once they are inside the organization, malware outbreaks can spread with alarming speed, compromising or destroying mission-critical data or personal information.
Restore Infected PCs with the Malware Removal Starter Kit!
When you discover PCs that have been infected with malware and your current antivirus tools can't solve the problem, where do you turn next? Is there a way to restore infected PCs without completely rebuilding them from scratch?
The Malware Removal Starter Kit, the newest Solution Accelerator from Microsoft, provides free, tested guidance to help you combat malware attacks and restore infected systems—so users can safely get back to work. The kit shows you how to use the Windows Preinstallation Environment (Windows PE) to discover malware by performing a thorough offline scan of your computers, uncovering malware that may be hiding in the operating system. And once malware is located and identified, it can be quickly removed from infected PCs with a number of free anti-malware tools , like the Malicious Software Removal Tool from Microsoft.
The Malware Removal Starter Kit answers questions like:
· What are the keys to a reliable, effective response plan to remedy malware outbreaks?
· How do I build a bootable CD that lets me perform offline virus scans?
· How can I discover and remove viruses and other malware hiding in the operating system?
· How does the Malware Removal Starter Kit augment Microsoft's anti-malware strategy?
Key Benefits
The Malware Removal Starter Kit is:
· Effective: Helps you to uncover malware that's difficult to expose.
· Flexible: Lets you use best approach for the specific problem you're facing.
· Reliable: Provides guidance thoroughly tested by Microsoft security experts.
· Simple: Offers a solution that is easy to configure and use.
· Free: The Malware Removal Starter Kit is a free download from TechNet.
Download the free Malware Removal Starter Kit
Accessing the kit is easy, and it's free! Click here to learn more or to download the kit.
Warren Simondson of Ctrl-Alt-Del IT Consultancy, has released another FREE Microsoft Terminal Services / Citrix utility. REMPROF was written to replace the command DELPROF.EXE currently found in the MS Windows Resource Kit. This utility offers extra features that will be of benefit to all admins. REMPROF has the ability to delete user profiles on the local machine based on age, username, or SID association. If a username has been deleted from a Domain or Workgroup, the profile often still exists with only a SID assigned to identify it. REMPROF can delete these profiles completely from the file system and registry regardless of the profile age, and without removing existing profiles of the same age.
This tool could be simply run from the command line at any time, or added as a SCHEDULED TASK for regular cleaning of user profiles, reducing the overall disk space used for locally based profiles.
REMPROF will only function when executed by a user with ADMIN rights to the profile directory.
He also has a utility called BombProf that allows for Multiple profile deletion. Go get them at:"Sometimes, earlier versions of Windows falied to unload the registry portion of the user profile. Many times this failure prevented the user from subsequent logons to the same computer. Windows Vista always unloads the registry portion of the user profile, even if it must forcefully do so, prior to synchronizing the profile to the profile server. Windows, when forcefully unloading profiles, writes an event message to the event log. The description of the event contains the name of the process that prevented the registry from unloading and the closed registry path."
