> My question is, since the system was compromised and system > files and the registry have been replaced/added too, am I > just better off formatting the system partition and restoring > from a good backup? IMHO it's the only way for you to be 100% sure that machine is not compromised. on that thought, when were your backups made? could they be compromised too? nothing beats restoring a virus from a backup tape and taking down the REST of the network. ;) -d --------------------------------------------------------------------------- ----------------------------------------------------------------------------
This archive was generated by hypermail 2b30 : Tue Jul 22 2003 - 13:17:36 PDT