Adware/Spyware scan on LAN?

[buddha-22]

Is it possible to scan an entire LAN for adware/spyware and remove them from one computer? If it is possible then how would you go about doing this?

[CompGeek]

I've not heard of being able to do this. Depending on what type of SMS software you're running though, it could be possible to fetch a compliled list of all software installed in every client across the network.

You would have to unintall on each client though, unless you write a batch file to execute across the network, which could be messy.

Those are my thoughts anyway.

[astcell]

Maybe you can administratively share the drives on the other machines and then scan them, but don't count on registry searches.

[buddha-22]

Thanks

I think I'm going to try a little combination between what you both said.

[Mr. Peabody]

Write a windows script that removes common adware/spyware file entries and tests the registry. Include this in your users' login script. Check with microsoft for more information on WSH

[the juggernauth]

This works for me, I have 11 systems on my network.

Hi,
I don't know if this could work for you, but it does for me.
There's a program called "Pest Patrol" that allowes you to scan the "Administrative Shares" of your network, i.e: "C$", "Admin$"... on the client systems.
Here is the evaluation edition Download; which allows you to scan your system and the network, but you CAN NOT remove the treats found...

To do so, requires the full version or buying this one...

You can also look around P2P networks for a full version.

Hope this helps... ;)

[jesse]

You can also look around P2P networks for a full version.

If you've been installing software from p2p networks, i can see why you have quite the virus/spyware problem.

[the juggernauth]

If you've been installing software from p2p networks, i can see why you have quite the virus/spyware problem.

On the contrary, I don't have a virus/spyware problem from the P2P Networks...
The systems on my network are for students from the University where I work, to use for internet access...

The students are the ones who visit those pornography sites and those "Get this free" sites and especially the ones that give this nice "Security Warning" that you have to click yes to, before you can proceed :P, those love to put things like this Weather Bug and other programs LOADED with spyware... Recent addition on the list of programs that affect me is one called "Internet Optimizer" :P yea right :D

Anyways, what I need is protection, not removal/cure...
I want a program that can block this from even happenning, someting like Ad-watch, got that, but it always asks for user intervention, and they just click yes :P
Defeats the purpose altogether.

Anyways, just dropping a little line for the day, lataz...

Until next time, Stay Spyware/Adware Free : Get your copy of Ad-aware Professional/Personal now... act now for this limited time offer of $19.95 yea right LavaSoft
So long

[skroo]

Anyways, what I need is protection, not removal/cure...

See this link for a broad overview of three appliance-based solutions. While these won't necessarily catch everything, they will go quite some way towards mitigating the problem you're having.

Also, given that you appear to be in a Windows 2000 domain structure, I would seriously recommend looking into using Group Policy Editor to disallow network users from being able to affect major changes (such as installation of ad/spyware) on their workstations.

And finally... Run antivirus separately on your mail servers. These three steps alone should cut down on about 90% of the problems you're seeing.

[the juggernauth]

See this link for a broad overview of three appliance-based solutions. While these won't necessarily catch everything, they will go quite some way towards mitigating the problem you're having.

Also, given that you appear to be in a Windows 2000 domain structure, I would seriously recommend looking into using Group Policy Editor to disallow network users from being able to affect major changes (such as installation of ad/spyware) on their workstations.

And finally... Run antivirus separately on your mail servers. These three steps alone should cut down on about 90% of the problems you're seeing.

Thankz alot for the advice...
Will start to implement these changes ASAP...

[hitman45]

It is called Ad-Aware a free program made for serching registrys and files for spyware/adware for virus's get norton on some B$ like that
---Warning Kazaa has spyware linked to its main file so Kazaa will not work after scan and removel of spyware/Adware unless you have the no adware spyware Version like i got if you want it ill give you my ftp: if my computer gets fixed soon---

[the juggernauth]

Un

It is called Ad-Aware a free program made for serching registrys and files for spyware/adware for virus's get norton on some B$ like that
---Warning Kazaa has spyware linked to its main file so Kazaa will not work after scan and removel of spyware/Adware unless you have the no adware spyware Version like i got if you want it ill give you my ftp: if my computer gets fixed soon---

Actually, I have a copy of Ad-aware Professional 6.0 Build 181, and PestPatrol Corporate 4.3.0...

Those two programs go a FAR way for me when it comes to Spyware/Adware.
I especially like PestPatrol, it has a network scan feature, but I think I mentioned that in an earlier post on this board... :D

So, in terms of the FTP for your site to get a copy from you, as far as that goes, I won't be needing it, however, if you need a copy of one that I have :D sure, I can give you MY FTP :p

Until next time---
Peace.

[Qu|rk]

It is called Ad-Aware a free program made for serching registrys and files for spyware/adware for virus's get norton on some B$ like that
---Warning Kazaa has spyware linked to its main file so Kazaa will not work after scan and removel of spyware/Adware unless you have the no adware spyware Version like i got if you want it ill give you my ftp: if my computer gets fixed soon---

Yes it will - with registry mods and fake files created, however K-lite 2.4.3 is recommended, is stable and has quite a few new features over the original.

Qu|rk-

[Qu|rk]

Anyways, what I need is protection, not removal/cure...

Easiest way is to modify the hosts file, or obtain one with a nice list of those things that point to 127.0.0.1 - my hosts file is 303k in size, if you want it as a good start, IM me with where you want it mailed to and I'll be happy to zip it off.

Qu|rk-

[astcell]

If you download the Kazaa Lite software it comes with an updated lmhost file with tons of spam sites blocked that way.