Basically, the only "blanket statement" that can be made in IT is " there should be no blanket statements." Every enterprise is unique, and even if you ultimately make the same decisions as someone else about what you run in the front and back, there will always be challenges unique to each different organization. I've said it before and I'll say it until I die - IT is not a "one size fits all" system. Worse, if you're doing it because of a suspected security breach or compromise, then you shouldn't allow ANY of the machines to return to the network until ALL machines with network access have been completely reimaged and properly vetted. But there will ALWAYS be some that have various issues, and those typically require 1-on-1 intervention. If you have to reimage 1,000 remotely, yes, it's not difficult to get to 8-900, maybe even 950. It's not when they're in people's homes, spread around the world, with internet connections ranging from 10mbps to 1gbps.Ĭompletely agree with this as well. The more different companies that you can add to your security layers, the better.Īs I made that comment in the first place, I'll answer this: It's easy to reimage 1000 workstations if they're all in the same office. NSA (I'm also a former NSA contractor), I don't trust ANY security product to protect my information outside of routine packet sniffing and DPI. But, knowing what I now know about the U.S. Once I got used to Kaspersky's management console, I was absolutely fine with their performance and results. It's not like Putin turned into a madman dictator overnight. Although I believe in Kaspersky's independence from Russia's intelligence communities, they didn't do themselves any favors by failing to completely relocate out of Russia when they had the chance many years ago.
I completely agree with both your comment and your sentiment re: punishing a company simply because they are in Russia, but still needing to be safe just the same. This includes testing it in safe mode as well.Ģ. I tried my own variation of this 3-4 years ago using their uninstall string from the registry and it did not work only their provided uninstall tool did the trick. Powershell $paths 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\', 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\' ) foreach ( $path in $paths )ġ. Even more impressive if you can use tools like Microsoft Endpoint Manager. You can get to 1000 pretty quick that way. Beside the obvious tools from Microsoft there are dozens of aftermarket imaging tools you can use to reimage 10-50 at a time.
KASPERSKY REMOVAL VIRUS TOOL UPGRADE
My employer used their tools many moons ago, and I see it on a few sporadic older servers (virtual), I may just forklift upgrade them.ġ000 computers are not harder to reimage than 10. I am of a similar mind if this is where you are going. If the reason to remove is their admitted spyware within the application, then you should treat the computers with it installed as compromised, format, and move on. I agree with what others have said though. Take one as a test box, find the pieces that need removed by manually doing it on that box. If you find the basic registry entries and locations of files you should be able to write a script to remove both that you can apply to all the workstations. Even something as simple as a unneeded registry key.Įnough of the tools, learn some regedit, and file find. While this might seem like overkill it really is the only way to be sure any program is removed since many factors can prevent it from completely. If you are in a situation where you need to be able to ensure it was completely removed such as a government computer or something that requires documentation stating it was without doubt removed then you're left with wiping the harddrive and reloading the OS from scratch. I very rarely even need to go beyond REVO in most cases. I've use those tools in so many situation and they've worked extremely well. These are what I would use in most situations in this order of need. Even if simply wanting to switch to something else and not have more than one running at the sametime. With that said it's unlikely that this is an issue but it can be reasonable to want to take precautions.
Kaspersky has on more than one occasion stressed that they are independent and have even moved to another country to prove it.
0 kommentar(er)
